Intelligent CISO Issue 06 | Page 43

E R T N P X E INIO OP A well-protected organisation should be like an onion. If cybercriminals get through one layer of security, they should be stopped by another layer. most security frameworks because they can reduce the most risk and mitigate www.intelligentciso.com | Issue 06 against the greatest attack surface area. Of course, frequent backups are also key so that if ransomware does manage to get through, infected devices can be wiped and restored to their most recent backup. Developing a culture of security Technology is key, but effective defences can’t be put into place without c-suite buy-in. The c-level need to understand the enormous cost and business risk associated with cyberthreats such as ransomware, so that they place security at the top of their boardroom agenda. If the board doesn’t understand cybersecurity, an organisation cannot defend itself against cyberattacks because ultimately these people control business purse strings. If they act as security role models, promoting the highest levels of cybersecurity in their departments as well as with their own actions, the employees will likely also pick up secure behaviours and take cybersecurity just as seriously. Having a culture of security within the organisation, as well as an in-depth approach to security technology, will best prepare your organisation for the money-making attack of the decade, the ransomware attack. Cybercriminals are always thinking of new ways to infiltrate, so the entirety of the organisation must always have security top of mind so that they can aim to stay ahead. u 43