Garmin and Twitter recently joined the ranks of a string of global organisations that have fallen victim to crippling cyberattacks. A little closer to home, last year, the City of Johannesburg’s network was also hacked and held ransom for a hefty 4 bitcoins (worth around R520 000 at the time). While the nature of these attacks may be different, it’s clear that cybercrime is on the rise and companies of all sizes and across all sectors need to be vigilant.
An ideal environment for cybercrime
It’s no surprise that these attacks are becoming more common in today’s increasingly connected society. The rise of online applications and services means unprotected users are more exposed than ever before. Added to this, the current pandemic has pushed many organisations to implement remote work policies to ensure business continuity.
As a result, the corporate network perimeter has been extended beyond the physical bounds of business and into the homes of all employees. Which further complicates the process of securing these endpoints, and consequently, the corporate network itself.
The far-reaching impact of a breach
By compromising company networks and causing downtime and service disruption, these attacks can end up costing businesses millions of rands in financial damages. In a 2020 survey of 200 South African companies conducted by Vanson Bourne, the average cost of remediating a cyber-attack was found to be R3 730 000. However, the negative effects don’t end there; if threat actors manage to encrypt customer data or company billing information, this deals another crippling blow to an organisation’s ability to operate.
While difficult to quantify, the reputational damage caused by these attacks can ultimately lead to a reduction in sales as customers’ faith in the organisation’s ability to secure itself wanes.
Effectively defending against cyber threats
Threat actors employ a variety of attack vectors in order to compromise your network. As such, it is important that organisations implement layered security policies and systems that decrease the attack surface and defend against multiple attack vectors.
You can improve your organisation’s security posture by implementing the following best practice measures:
Ensure you have the best protection, including a high-performance next-gen firewall with IPS, TLS Inspection, sandboxing, and machine learning ransomware protection. Lockdown RDP and other services with your firewall. Use your firewall to restrict access to VPN users and whitelist sanctioned IP addresses.
Reduce the attack surface area as much as possible by thoroughly reviewing all port-forwarding rules to eliminate any non-essential open ports. Every open port represents a potential opening in your network.
When an infection hits, it’s important that your security solution is able to quickly identify compromised systems and isolate them until they can be cleaned up.
Even the most comprehensive security solutions have the potential to be compromised. Implementing an offsite backup solution and disaster recovery measures will ensure that your business is able to recover as quickly as possible from any data corruption or loss that might occur.