Protect your data from cyber criminals
By Prempal Singh
Almost half of crime in the UK involves computer systems, which has both trust and financial implications. A good strategy is essential
Cybercrime is one of the greatest threats facing organizations around the world, using its total annual worldwide cost estimated at $445bn, based on the World Economic Forum’s Global Risks Record 2016.
While the rise in cybercrime is a global trend, the UK has particular reason to be concerned. Its incidence here has risen substantially and the UK is now one of the most targeted European nations. According to the Workplace for National Statistics, cyber-enabled fraud and computer misuse account for a staggering 47% of crimes dedicated in the UK.
As public organizations in particular increasingly rely on digital communications and hold huge amounts of information, they have become targets. An FOI request by security organization Avecto revealed that almost one-third (30%) of UK councils fell sufferer to a ransomware strike in 2015. Given the clear financial implications of attacks, not to point out the potential damage to infrastructure and the public’s trust, there is much at stake.
Launching the Rs 1.9bn National Internet Security Strategy 2016-2021 in November, cyber security minister Ben Gummer MP said the public sector just visited risk from a “range of adversaries, from organized crime, ‘hacktivists’ and fake individuals, both internal and external, through to state-sponsored actors and foreign states”.
However, while the strategy is welcome and will make a difference, investment from Whitehall alone are not able to eliminate the cyber danger facing the public field. Organizations must make sure their internet security strategies are upward to scratch now.
Evaluation your policy
Cyber strategies should be focused not only on identifying personal risks but also on developing resilience and security. To begin with, all organizations need to regularly review their IT policy, ensuring it covers everything from how to handle data to passwords, appropriate web accessibility and how and when personal devices can be linked to the system. The strategy should be a living part of an organization’s operations, developing to reflect ever-changing exposure.
Develop in resilience
Once this is done, an organization are able to use technology to identify attacks and protect IT infrastructure. For example, security software can help thwart a cybercriminal’s ability to accessibility-sensitive data. Employee recognition must not be ignored; however, best IT security is vulnerable if employees do not respect the protocols.
Organizations should work together using their public and private sector partners on best practice as well as for advice on cyber security risk mapping. Zurich, for instance, uses an information governance scorecard, which reviews every aspect of a customer’s cyber defenses so our experts can quickly identify gaps.
Get ready for the worst
However good an IT coverage is and however you communicate and reinforce their messages, it is almost inevitable that there will be a breach eventually. Organizations must be well prepared with a clear, rehearsed emergency want to deal with data leaks, malicious programs, and business interruption, dovetailed into communication and business continuity planning as necessary.
Be cyber knowledgeable
Internet security is continually growing and protection mechanisms can quickly become obsolete. It’s, therefore, important for companies to stay on top of the internet landscape and, equally, analyze whether their insurance cover is fit for the objective.
The cyber threat will continue to develop scale and complexity. Public field bodies must mitigate their risk by investing in powerful defense and response strategies and collaborating with partners to identify best practice and developments in the cyber landscape.
Source: publicfinance.co.uk