In our last blog, we discussed several common cyber-attacks, this week we will discuss some common ways to protect against them. We will also identify some detection methods for recognizing these “attacks”.

Before discussing the protection and detection methods, it would be a good time to explore the idea of identifying a specific cyber security expert within your organization. Depending on the size of your organization this may be a full-time position within your IT department. Because cyber security affects almost all facets of an organization, the cyber security expert would need to educate every level of the organization about cyber security methods and the procedures your organization uses. Finally, an on staff cyber security expert can advise an organization on the latest trends, install appropriate security measures (firewalls, air gaps, etc) and monitor the organization’s network.

The following is a short list of common cyber hygiene practices. This is in no way an all-inclusive list but is a good starting point to protect against a cyber-attack:

• Use of a strong password – Although this may seem like an overly simplistic method, the utilization of a strong password is one of the most basic steps in cyber security.

• Practice and enforce cyber hygiene – Establish an organizational protocol (including strong password), which clearly defines cyber hygiene. Some examples include: locking computer screen when not in use, preventing the download of unauthorized software, educating employees of cyber threats, limit the amount of personnel with administrative privileges.

• Updated Software – Old or outdated software may provide an avenue for accessing a network. New/updated software generally identifies and remedies security shortcomings in previous editions.

• Upgraded aging infrastructure – In addition to updating software, upgrading an organization’s aging hardware and components can assist in protecting against an attack.

• Back up data – Having a system (cloud based or local separate storage) where your system and data can be backed up in the event of a cyber-attack or other catastrophic loss. A data backup can reestablish your facility’s operation if an attack causes data loss.

Although protection from a cyber-attack is paramount, the detection of a cyber-attack is also extremely important. In some cases, the detection of a cyber-attack may enable protective measures to be employed thereby preventing significant damage or system outages.

• System slow down – Any significant reduction in Internet speed should be reported immediately to the IT department or help desk.

• Email attachments – At no time should an email attachment from an unknown sender be opened. These attachments may contain Malware and could cause serious problems.

• Identify emails from unknown sources – An “official” looking email may be initiating a cyber-attack. Responding to a suspicious email can be just as risky.

Almost all of the cyber-attacks involve some type of human interaction. One of the best ways to detect AND protect against a cyber-attack is educating your team. A properly trained end user will be able to detect a suspicious email, a system slow down or other unusual network activity and report it to prevent a cyber-attack.