Four 2017 Resolutions to Immediately Improve Cybersecurity
Security | Jan 3, 2017
The new year is the perfect time to evaluate the health of your cybersecurity. Listed below are four security resolutions that can help any organization reduce digital risk as we start 2017.
- Find your Sensitive Data – The alarming truth about cybersecurity is that, in practice, security teams rarely know where the valuable data they are tasked to protect is located. In 2017, it’s time for security teams to answer basic questions like - what sensitive data would do the most harm if lost or stolen, and where does this sensitive data actually reside? The best-prepared organizations in 2017 will coordinate information security and information governance to dramatically reduce their surface area of digital risk. Organizations that don’t integrate will likely face more significant breaches and greater costs associated with regulatory fines, expensive remedial actions, and loss in consumer confidence. Guidance offers EnForce Risk Manager, a purpose-built solution to proactively identify, categorize, and remediate private or sensitive data across the enterprise.
- Move Beyond the Perimeter - So-called “next-gen” solutions like Endpoint Protection Platforms (EPP) and other perimeter security vendors promise to eliminate “99% of all threats.” Well, that 1% cost the global economy an estimated $3 trillion in 2015. And the cost of cybercrime is estimated to double to $6 trillion by 2021. Effective cybersecurity in 2017 and beyond will require a layered approach that includes tools for prevention, detection, investigation, remediation, and coordination. Gartner recommended this year that organizations shift focus from perimeter defense to a “continuous response” mind set. The idea is to assume that systems are already breached, requiring active monitoring and response. Gartner also predicts that by 2020, rapid detection and response solutions will make up the majority (60%) of cyber security budgets, up from only 10% in 2014.
- Keep the Board Engaged - Executive sponsorship and board-level visibility is a must for a successful data-centric security strategy. C-level accountability will ensure the efficient coordination of data activities that include information security, e-discovery, records management, and privacy and risk management. This is absolutely critical to safeguard the driving force of any organization – personally identifiable information, non-public information, and sensitive corporate data.
- Start the year fresh with a Comprehensive Threat Assessment – According to the Ponemon Institute, the average time to identify a breach is 201 days, or more than six months. Don’t start the new year with unknown threats on your network. A 360-degree Threat Assessment Service from Guidance Software combines three transformational technologies to provide a cost-effective solution, with the shortest detection and response time in the industry. With a comprehensive assessment from Guidance, you can ensure adversaries are not active in your network, sanitize your organization before major deployments, and/or augment existing capabilities with new analytics, artificial intelligence, and forensic visibility.
Despite massive security investments, cyber-attacks were more expensive and more frequent than ever before in 2016. The scale and scope of cybercrime will only continue to grow in 2017, so the time to make (and carryout) your New Year’s security resolutions is now.
Charles Choe joined Guidance Software in 2015 as a Product Marketing Manager for the EnCase security suite of products. Charles earned his JD/MBA from the University at Buffalo in 2007. Since graduating, he worked as an Online Product Manager across a number of different industries, including Banking, Publishing, and Technology.