{"id":41025,"date":"2020-12-10T10:32:00","date_gmt":"2020-12-10T02:32:00","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=41025"},"modified":"2020-12-10T10:32:36","modified_gmt":"2020-12-10T02:32:36","slug":"organizations-need-to-adopt-a-when-not-if-approach-to-crisis-planning-sophos","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2020\/12\/10\/organizations-need-to-adopt-a-when-not-if-approach-to-crisis-planning-sophos\/","title":{"rendered":"Organizations need to adopt a \u2018when\u2019 not \u2018if\u2019 approach to crisis planning &#8211; Sophos"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>\u201cIn times of crises, we unfortunately always see bad actors taking advantage of people\u2019s fear and confusion for personal gain. We\u2019ve seen this happen during or after disasters and tragedies in the past, and we\u2019re seeing this happen again amidst the ongoing COVID-19 pandemic.\u201d<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So said Sumit Bansal, Senior Director of ASEAN and Korea, Sophos, who also noted that since early March, there has been a surge in email scams and malicious domains using COVID-19\/coronavirus themes as a hook to reel in unsuspecting victims.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Reported common attack techniques include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>COVID-19 news \u2013 emails, SMS, and WhatsApp messages from unknown sources, or sources that impersonate legitimate news or government organizations, pretending to have information on the coronavirus.&nbsp;<\/li><li>Malicious apps \u2013 purporting to offer useful information on the coronavirus, these apps enable crooks to access all the information on the device \u2013 and even hold the owner to ransom.&nbsp;<\/li><li>Home delivery scams \u2013 with many people waiting on home delivery of essential items, hackers are impersonating delivery services. Their goal: to trick you into clicking on malicious links or con you into paying extra \u2018delivery\u2019 fees.<\/li><li>Extortion attempts \u2013 criminals threaten to infect people with the coronavirus unless they pay them. Often these threats include a small piece of personal information to make it more believable.<\/li><li>Malicious documents \u2013 these documents claim to contain coronavirus-related information. Upon opening them you\u2019re asked to \u2018enable editing\u2019 and \u2018enable content.\u2019 Doing so installs malicious software onto your computer.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>TECH RELIANCE<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The challenges come with the territory.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u201c<\/strong>Our everyday reliance on technology has significantly evolved over the past 20 years, especially on the personal technology front, which has certainly been revolutionized with the mass popularity of the smartphone. This has greatly helped people stay far more connected and informed during this time compared to other tech and natural disasters of the past,\u201d Bansal said. \u201cAnd while this greater connectivity provides endless benefits for users, it also provides more opportunities for cybercriminals. With the right security technology in place and knowledge at hand on how to stay safe, the benefits can outweigh the risks.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On the business front, today sees many more businesses using the cloud, more financial transactions happening online, and more data being collected and stored remotely. This digitization of business has allowed many businesses to pivot to a remote workforce almost seamlessly helping to ensure business continuity while protecting employees from the virus. &nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cOf course,\u201d Bansal said, \u201cthe downside of this greater digitization and online activity is that it opens up more businesses to the threat of cyberattack. As the business online landscape becomes more connected, cybercriminals continue to evolve their attack methods to keep up and even leverage machine learning and automation to raise the stakes for their exploits. The good news is that cybersecurity has also significantly advanced. Sophos employs cloud-native and AI-enhanced solutions that can adapt and evolve to secure endpoints and networks against never-before-seen cybercriminal tactics and techniques.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>NAVIGATING CHALLENGES<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For Bandal, there are some three security-related tips for companies\/businesses as they move forward for them to successfully navigate or face similar pandemics like COVID-19.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. <strong>Patch early and patch often&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Don\u2019t delay applying software updates and patches. As cybercriminals continue to identify new security holes, businesses that delay their security updates are vulnerable to attacks. Given this, Sophos encourages companies to auto-update so they are running the latest software.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. <strong>Promote cyber awareness within your organization<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In 2019, 78% of organizations in the Philippines said that the biggest challenge to their security in the next 24 months would be improving cybersecurity awareness and education amongst their employees and management. We believe this challenge has been heightened by many organizations\u2019 shift to remote operations resulting from the pandemic.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To address this, Sophos recommends companies to have cybersecurity training courses or webinars so that their employees can be their first line of defense against cyber breaches and attacks.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. <strong>Revisit backup strategies<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While backing up is one of the most important practices against cyberattacks, organizations should consider that backups happening in real-time and kept on the cloud may still be accessed and destroyed by cybercriminals. To prevent this, Sophos advises companies to keep backup copies offline and offsite by unplugging backup devices and logging out of cloud backup accounts.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But Sophos has &#8211; of course, offerings to also help organizations deal with unforeseen instances like COVID-19.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWith its pioneering Synchronized Security platform, Sophos is uniquely equipped to help customers deal with unforeseen circumstances. Synchronized Security is the world\u2019s first \u2013 and best \u2013 cybersecurity system that allows companies to secure their endpoint, network, mobile, Wi-Fi, email, and encryptions from one platform. Before, in the face of cybersecurity attacks or sudden changes in operations (such as the recent shift to remote working due to lockdowns), companies\u2019 IT managers would have to deal with each separately, which is tedious and frustrating.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With Synchronized Security, companies \u201ccan secure all fronts seamlessly and efficiently as Sophos products share information in real time and respond automatically to each other, giving businesses one less thing to worry about in a time of crisis.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>MOVING FORWARD<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Knowing that something like Covid-19 may happen again, what is the best lesson that companies\/businesses can learn from this experience?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThis pandemic has taught many businesses the hard way that disruption can happen to any business and industry, no matter how big or small they are. Whether it\u2019s caused by a physical human virus or an electronic one, disruption can come when you least expect it,\u201d Bansal said. \u201cTherefore, organizations need to adopt a \u2018when\u2019 not \u2018if\u2019 approach to their crisis planning. While the nature\/cause of the crisis may be out of our control, how we secure and protect ourselves to ensure our business continuity, is certainly something we can put in place now. In addition, while cybersecurity has often been relegated to an organization\u2019s IT team, this pandemic has shown that it needs to involve everyone \u2013 from management to individual employees \u2013 as they are the front line to keeping a company going even in the midst of uncertainty.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Sumit Bansal, Senior Director of ASEAN and Korea, Sophos: &#8220;This pandemic has taught many businesses the hard way that disruption can happen to any business and industry, no matter how big or small they are. Whether it\u2019s caused by a physical human virus or an electronic one, disruption can come when you least expect it. Therefore, organizations need to adopt a \u2018when\u2019 not \u2018if\u2019 approach to their crisis planning.&#8221;<\/p>\n","protected":false},"author":2,"featured_media":41026,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15,19],"tags":[1481,286,54,2103,3914,53,4100,4234,206],"class_list":["post-41025","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business","category-headlines","tag-cybersecurity","tag-it-security","tag-security","tag-security-breach","tag-security-platform","tag-security-risk-management","tag-security-solutions","tag-security-as-a-service","tag-sophos"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/41025","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=41025"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/41025\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/41026"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=41025"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=41025"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=41025"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}