4 Strategies to Avoid Cybersecurity Burnout

Written by Adrian Taylor, VP of EMEA at A10 Networks 

CSOs, CIOs and CISOs have never had it so tough. Alongside their traditional responsibilities, they must now face a cybersecurity threat environment that is growing exponentially, and a growing cyberskills gap. As a result, many of them are reporting burnout.

Today, ransomware has become one of the greatest network security threats organisations have to deal with. Increasingly sophisticated and distributed at a high speed via the internet and private networks using military-grade encryption, today’s ransomware attacks demand multimillion-pound ransoms. Ransomware is expected to cost businesses around £15 billion this year and nearly £200 billion by 2031, and this  is only one of the many threats organisations have to deal with.

There are also distributed denial of service (DDoS) attacks, Man in the Middle (MitM) attacks, social engineering, insider threats, malware, and advanced persistent threats (APTs) to contend with – and those are just the most common network security threats. As organisations prepare for 2022, and cybersecurity professionals return from a hard-earned break, here are four strategies to make cybersecurity professionals’ organisations safer from the countless network security threats they’ll be facing in the near future:

1. Create a “Security-first” Culture

The problem for CSOs is that, while most employees have some basic knowledge of cybersecurity best practices, that is pretty much all they have. Without ongoing training, knowledge testing and awareness, staff behaviour is one of the biggest cybersecurity risks that organisations face.

A study by Accenture revealed that less than half of new employees receive cybersecurity training and regular updates throughout their career. Just four in ten respondents said insider threat programs were a high priority.

Organisations must look to create a robust and distributed digital immune system with a radical re-engineering of staff behaviour. Business leaders need to have accountability for cybersecurity; security teams need to collaborate with business leaders to create and implement policies that will actually work, and those policies need to be routinely re-evaluated and tested.

 

2. Create a Continuous Security Education Program

A “security-first” culture requires that all members of the culture appreciate the concept of network security threats. For this to actually have an impact on culture, however, staff must be trained routinely to ensure that their knowledge is current.

 

3. Implement a Zero-Trust Model Throughout the Business

Well-trained staff and a monitored environment are crucial to the successful protection of any organisation but without a foundational Zero Trust environment, defences will be intrinsically weak.

The Zero Trust model is a strategy for preventing network security threats that all enterprises and governments should be using to defend their networks. It consists of four components:

 

  • Network traffic control: Engineering networks to have micro-segments and micro-perimeters ensures that network traffic flow is restricted and limits the impact of overly broad user privileges and access. The goal is to allow only as much network access to services as is needed to get the job done. Anything beyond the minimum is a potential threat.
  • Instrumentation: The ability to monitor network traffic in-depth along with comprehensive analytics and response automation provides fast and effective incident detection.
  • Multi-vendor network integration: Real networks aren’t limited to a single vendor. Even if they could be, additional tools are still needed to provide the features that a single vendor won’t provide. The goal is to get all of the multi-vendor network components working together as seamlessly as possible to enable compliance and unified cybersecurity. This is a very difficult and complex project but keeping this strategic goal in mind as the network evolves will create a far more effective cybersecurity posture.
  • Monitoring: Ensure comprehensive and centralised visibility into users, devices, data, the network, and workflows. This also includes visibility into all encrypted channels.

At its core, the Zero Trust model is based on not trusting anyone or anything on the company. This means that network access is never granted without the network knowing exactly who or what is gaining access.

 

4. Establish and Test Disaster Recovery Plans 

A key part of a disaster recovery plan involves backups. However, it is surprising how often restoring from backup systems in real-world situations doesn’t perform as expected. It’s important to know which digital assets are and are not included in backups and how long it will take to restore content.

CSOs should plan the order in which backed-up resources will be recovered, know what the start-up window will be, and test backups as a routine task with specific validation checks to ensure that a recovery is possible.

 

Staying Secure

The CSO’s job isn’t getting any easier, but solid planning using the four strategies will help ensure an organisation’s digital safety. In addition, partnering with top-level enterprise cybersecurity vendors will ensure that critical security technology and best practices are central to the organisation’s cybersecurity strategy.

Editor

Lisa Baker is the Editor of International Business News. As the Owner of Need to See IT Publishing, Lisa is an experienced business and technology journalist and publisher.

ESG/CSR News

Blancco Named Sustainability Innovator of the Year at Channel Partner Insight’s US MSP Innovation Awards

Industry channel publication recognizes Blancco for significant role in empowering organizations worldwide to better engage with circular economy AUSTIN and LONDON – May 27, 2022 – Blancco Technology Group (LON: BLTG), the industry standard in data erasure and mobile lifecycle solutions, today announced that the company has been named Channel Partner Insight’s Sustainability Innovator of […]

Read More
News Property Security

Tips for Designing a New Office Building

If you’re in the process of designing a new office building, there are some key things to keep in mind. In this article, we’ll share some tips for designing a new office building that will help ensure its success. From layout and function to aesthetics and sustainability, keep reading for everything you need to know […]

Read More
Healthcare News

Medical cannabis charity announces funding available for Jersey residents to support access to “life changing” prescriptions

From mid May 2022, Jersey residents can now apply for a grant to fully support medical cannabis prescription from the UK’s only medical cannabis charity, Sapphire Medical Foundation thanks to new funding. Those selected who meet the eligibility criteria to access medical cannabis prescriptions and clinic appointments will be paid for by the Sapphire Medical […]

Read More