Cyber Issues

The number and complexity of cyber threats continue to increase and so does the risk they pose to organizations. As this week's quote states, cyber attacks are now viewed as the fifth dimension of warfare; we already have seen hacking by China and Russia on both government and private sector databases. If you haven't made a plan to deal with cyber threats, now is the time to get started. This week we provide information and tips on cyber security that may help you in your efforts.

As the world becomes increasingly interconnected, Business Continuity/COOP professionals must pay more attention to the security of their organization's connections. (Item #1)     Cyber security incidents can have business continuity implications and impacts that extend far beyond IT. (Item #2)     Research points to a widening range of technology vulnerabilities and potentially huge losses in value tied to innovation. (Item #3)    

A computer network assessment will help you begin a cyber security plan to mitigate the largest risks to your business. (Item #4)     Protecting your company online begins with ensuring your employees are prepared to assist in keeping your computers and networks safe. (Item #5)     How would you know if you were the victim of a denial-of-service attack? (Item #6)    

As always, we look forward to hearing your comments & insights regarding business continuity. If you have a topic you'd like us to cover, email me at [email protected].

Bob Mellinger, President
Attainium Corp

1. The Importance of Cyber Security within Your Organization

The purpose of this article is to prepare you to articulate the importance of Cyber Security, to gain allies to implement procedures, and to justify the value of a Cyber Security Audit. After all, Cyber Security concerns more than the Information Technology (IT) and BCP/COOP departments.
http://www.disaster-resource.com/index.php?option=com_content&view=article&id=1717:the-importance-of-cyber-security-within-your-organization&catid=6:information-technology

2. Integrating cyber security and business continuity

The last several years have continued to see an increase in the sophistication and volume of cyber threats and, in most organizations, monitoring and response has continued to develop and mature within IT to proactively address vulnerabilities. That said, there may be opportunities to better integrate IT's response to such illicit activity with the organization's business continuity program and structure, so that if an event does occur, the organization ensures a timely and coordinated response. This article provides an overview of the current information security standards landscape and highlights different actions an organization can take to better align business continuity and cyber security efforts and increase organizational resilience.
http://www.continuitycentral.com/feature1175.html

3. The rising strategic risks of cyber attacks

More and more business value and personal information worldwide are rapidly migrating into digital form on open and globally interconnected technology platforms. As that happens, the risks from cyberattacks become increasingly daunting. Criminals pursue financial gain through fraud and identity theft; competitors steal intellectual property or disrupt business to grab advantage; "hacktivists" pierce online firewalls to make political statements.
http://www.mckinsey.com/insights/business_technology
/the_rising_strategic_risks_of_cyberattacks

4. Implement a Cyber Security Plan

Most experts recommend that businesses start by having a strategic approach to cyber security. This strategic approach should include plans to secure existing systems and keep your business secure going forward. The Federal Communications Commission created the Small Biz Cyber Planner (http://www.fcc.gov/cyberplanner) to help businesses evaluate their current cyber security posture and create a plan.
http://www.staysafeonline.org/business-safe-online/implement-a-cybersecurity-plan/

5. Business Safe Online: Train Your Employees

The best security technology in the world can't help you unless employees understand their roles and responsibilities in safeguarding sensitive data and protecting company resources. This will involve putting practices and policies in place that promote security and training employees to be able to identify and avoid risks.
http://staysafeonline.org/business-safe-online/train-your-employees

6. Understanding Denial-of-Service Attacks

You may have heard of denial-of-service attacks launched against websites, but you can also be a victim of these attacks. Denial-of-service attacks can be difficult to distinguish from common network activity, but there are some indications that an attack is in progress.
https://www.us-cert.gov/ncas/tips/ST04-015