Feature security awareness training. HR, IT or information security departments may conduct these exercises. “With phishing and social engineering, you may receive an email that appears to come from your CEO or someone you know. It can look completely genuine. When you click it, your computer may be compromised, a back door may be created or the attacker may move laterally towards sensitive systems and encrypt your machines. “This is happening frequently. People are receiving phishing emails that appear to come from their CEOs. “Organisations should train their employees and place greater emphasis on security awareness. Humans are the weakest link in cyber security. You can have excellent technology and processes, but failing to invest in people can lead to a serious incident. “Ransomware is another major threat. An attacker encrypts your machines or servers and then demands money. Ransomware began increasing around 2015 or 2016 and has since become extreme. I regularly receive calls from people whose machines have been encrypted. “Insider threats are another risk. Some organisations believe they are safe because they are air-gapped and do not have internet access, but that is not always the case. “Businesses can address this through least-privilege access controls and solutions such as Keystrike, which can stop lateral movement and provide continuous authentication.” Question 4: What principle should business leaders remember when developing their cyber security strategy? Shaikh Muhammad Adeel: “Cyber security is not a one-time effort. It is a continuous process. “Businesses must move quickly because cyber security does not become outdated. Different attack vectors emerge as technology develops. With Web 3.0 and blockchain, we need blockchain security. With AI, we need AI security. With quantum computing, encryption must become quantum-proof for the future. “Cyber security is a continuous investment that protects the organisation and provides visibility. Cyber security is not a onetime effort. It is a continuous process.”
RkJQdWJsaXNoZXIy MTUyMDQwMA==