Cyberattacks or breaches can cost companies more than just billions of dollars. Also at stake is operational efficiency, reputational damage, and time. Most companies will be keen to avoid any of these situations; yet the problem is that most businesses do not know where to start on their cyber strategy.
This is the assessment of Cyber Security Expert and the Founder of OccamSec, Mark Stamford. OccamSec recently released its new Incenter platform, which provides a dual approach to cybersecurity through continuous penetration testing along with vulnerability research and a threat intelligence team.
Stamford has recently been thinking about the key factors that decision makers need to consider when implementing cybersecurity solutions. Central here is the cybersecurity strategy, an approach comprised of high-level plans for how an organization will go about securing its assets and minimizing cyber risk.
Stamford presents these factors to Digital Journal readers:
Understand What You Need
According to Stamford: “Unless you have a large number of resources to throw at it, what do you do to best secure your organization? What does “best secure” even mean? Which tools do you buy? Do you need a pen test? There are endless questions, the answers seem to change every day, so how does anyone deal with this?”
Consider Resources
Under the heading of time, people and money, Stamford advises: “The need for security is pushing up the price of security. Because the sector is “hot” it’s being flooded with applicants. Unless you have a considerable budget to spend on security resources it’s difficult to get someone who can really help.”
Business & Tech Are Connected
Siloing the technology function is fraught with danger, notes Stamford. He notes: “Often cybersecurity issues are placed in a technical context, but if they can’t be tied back to the organization then it’s hard for non-technical people to understand them, and even harder to show value. Historically cybersecurity is seen as a purely technical field, this doesn’t help anyone.”
Get Past the Hype
With his final advice, Stamford recommends that companies to not get dazzled by quick solutions and apparent easy wins. He cautions: “Because almost everyone is impacted by cybersecurity, everyone is trying to sell something. Right now there is so much hype “this product will make you 100% secure!” “Stops all attackers” “A.I to secure your business” that we are in a boy who cried wolf situation. Everything is being questioned, nothing seems to do what it says, and organizations build up more resentment for anyone offering any solution.”
