{"id":205824,"date":"2021-10-21T13:18:51","date_gmt":"2021-10-21T11:18:51","guid":{"rendered":"https:\/\/mypr.co.za\/?p=109018"},"modified":"2021-10-21T13:18:51","modified_gmt":"2021-10-21T11:18:51","slug":"managing-the-predictability-of-cyber-risks","status":"publish","type":"post","link":"https:\/\/www.myza.co.za\/press\/managing-the-predictability-of-cyber-risks\/","title":{"rendered":"Managing the Predictability of Cyber Risks"},"content":{"rendered":"

<\/a><\/p>\n

Managed Predictability\u2122 is the brainchild and trademark of the award-winning IT Governance and Architectural services consultancy AVeS Cyber Security. At the heart of the consultancy\u2019s ethos is adapting to the changing landscape through a risk-based cyber security model. In a recent webinar by AVeS Cyber Security, Group CEO Charl Ueckermann emphasised the importance of predictive monitoring in cyber security.<\/p>\n

\u201cThe cyber environment is changing so fast, and we cannot only rely on a general assessment every once in a while. It simply isn\u2019t efficient, nor is it effective. It is like driving your car from one garage to the next, hoping nothing goes wrong underway. What you should do instead is constantly keep an eye on the changing fuel levels and temperature \u2014 you can\u2019t just drive blind and hope for the best,\u201d says Ueckermann.<\/p>\n

The same principle applies to the IT environment. Ueckermann refers to the IT environment as a cyber estate that needs maintenance to ensure that confidentiality, integrity and availability are always delivered to the client. Following a predictive risk management model on your cyber estate is a fundamental step each company must take.<\/p>\n

\u201cThe landscape is changing so fast: costs need to be driven down, we need less risk, and the environment should be significantly more predictable.
\u201cPreviously, companies tended only to react when things broke or didn\u2019t work, instead of monitoring the situation in a predictive way to foresee the problems that might occur. The key to bringing more predictably into your IT is not to overcomplicate things, but to look at things holistically,\u201d Ueckermann said.<\/p>\n

Changing Risk Landscape
The cyber risk landscape is continuously evolving, more so in the past 24 months. Ueckermann explains: \u201cCyber incidents have increased the past 24 months with a major increase in targeted attacks, especially in Africa. \u201cThese days, data is a company\u2019s most valuable asset. If data is not available, the company won\u2019t operate optimally. Furthermore, cyber risk is directly related to business risk. Cyber risks are not the same as cyber threats, which are the particular dangers that create the potential for cyber risk.\u201d<\/p>\n

Driving the increase in cyber attacks is a combination of factors \u2014 economic and trade battles, political instability worldwide, and now also Covid-19. Unemployment rates worldwide have reached a boiling point, forcing more people into criminal activities like cybercrime. Predictive cyber risk management needs to be high on every organisation\u2019s priority list in this ever-changing market and new regulatory landscape.<\/p>\n

AVeS Cyber Security is an IT Governance & Architectural Consultancy that focuses on helping companies improve their process consistency, reduce their cyber risk, increase their IT systems\u2019 efficiency, empower expertise among their staff, and operate intelligently with smart systems in place.<\/p>\n

\u201cUltimately, we want to enable clients to operate at a higher level and help them work proactively with less risk,\u201d says Ueckermann.<\/p>\n

What is Managed Predictability\u2122?
Guido de Jager, Security Operations Manager at AVeS Cyber Security, says everything starts with the screening of the customer, where the risks of different technologies are assessed. The next step looks at the likelihood that those technologies could be compromised and what the impact would be on the business if they were hacked. Only then can you start looking at achieving Managed Predictability\u2122 with the customer.<\/p>\n

De Jager explains that AVeS Cyber Security uses a Security Posture Assessment to identify the high-risk categories within an organisation that could lead to a potential breach or a potential cyber-attack.<\/p>\n

The Assessment entails the following:<\/strong><\/p>\n

\u2022 Information Security Policies: To determine whether the client has information security policies in place.
\u2022 Network Security: Review firewall, mail security, web app security, SSL security, endpoint protection, passive network monitoring, cloud security, and wireless security controls.
\u2022 Access Control: Review identity authentication, 2-factor authentication, VPN access (remote access for external users), network access controls, physical security to critical systems, privilege access management, and the Active Directory\u2019s health state.
\u2022 Business Continuity: Review the disaster recovery plan, quick recovery from hardware\/system crashes, quick recovery from data loss or corruption, backup solution, monitoring and reporting in place.
\u2022 Compliance: Review network monitoring, mail archiving, SIEM solution and alerting, and asset management systems.
\u2022 Confidentiality: Review encryption, mobile device management, DB\/SQL security, and data loss prevention systems.
\u2022 Risk Assessment: Review vulnerability management systems, security user awareness, incident response plans, penetration testing and red teaming controls.<\/p>\n

Predictive Cyber Security
Schalk Rust, Lead SOC Engineer at AVeS Cyber Security, points out that traditionally IT was done reactively, where incidents were monitored after they happened, and staff only responded once the network was down. Nowadays, he says, companies need real-time visibility into their cyber environments \u2013 a predictive model \u2013 so that IT experts can take immediate action because every second counts.
What is required for a Next-Generation Security Operations Centre (SOC)<\/p>\n

To establish a good cyber security posture, you need an appropriate set of well-configured SOC tools, such as antivirus solutions for endpoints and servers, firewall systems for network security, network monitoring and behaviour monitoring for devices, and global threat feeds.
What makes a SOC truly different and successful is the SIEM \u2013 the Security Incident and Event Management system \u2013 that powers all the SOC tools.
AVeS Cyber Security uses Splunk\u00ae as their SIEM solution. A traditional SIEM solution monitors and analyses security events, but Splunk\u00ae offers much more and allows for greater visibility in half the time.<\/p>\n

Splunk\u00ae incorporates best-practice frameworks and threat intelligence to analyse threats better, offering more in-depth knowledge on past and present threats. It also allows organisations to augment machine data and integrate with third-party applications and other SIEM solutions to gain additional insights.<\/p>\n

Incident Response Management
Be prepared! An incident can be expelled or irradicated without data loss if you have a rock-solid incident response plan in place. With legislation like Europe\u2019s GDPR and South Africa\u2019s POPIA, protecting data \u2013 especially sensitive\/confidential\/personal information \u2013 is crucial. The only way to do this is to get a predictive cyber risk management model in place.<\/p>\n

AVeS Cyber Security has built a rock-solid incident response management system that covers the following phases:
\u2013 Preparation
\u2013 Incident Response Execution Plan
o Roles and Responsibilities
o Detection
o Containment
o Remediation
o Recovery
o Lessons Learned<\/p>\n

How can AVeS Cyber Security help your company?
There are a couple of things needed to manage IT risks in an organisation effectively. Firstly, start with a solid governance framework to guide your cyber risk management plans and activities. Companies need to use a risk-based model to yield the best return on investment, and AVeS Cyber Security follows a lean approach to achieve this: Screening > Likelihood > Impact > Managed Predictability\u2122.<\/p>\n

This is done using well-known industry standards and governance frameworks. Once the initial assessment is completed, AVeS Cyber Security can propose the correct level of SOC implementation for your organisation to efficiently monitor, analyse, and proactively respond to cyber threats.
AVeS Cyber Security does this by leveraging the single pane of glass offered by Splunk\u00ae (an enterprise SIEM solution). This is then topped off with a comprehensive Incident Response Plan, which will take your company from a reactive to a proactive state in your cyber security maturity.<\/p>\n

About AVeS Cyber Security:
AVeS Cyber Security forms part of the AVeS Cyber International group of companies. It is a specialist in industry-specific IT Governance & Architectural services, combining expert knowledge and services with leading technology products to provide comprehensive Information Security and Advanced IT Infrastructure solutions. Over the past 23-years, AVeS Cyber Security has strategically honed its solutions and services to help businesses future-proof their IT environments against the continually evolving threat landscape while achieving their digital transformation aspirations. The company offers a leading portfolio of professional services, products, and training in security, infrastructure, and governance solutions. Every year, the company continues to win numerous awards from some of the world\u2019s top technology vendors, indicating competency, strength, innovation, and robustness in an industry that is fast growing in complexity due to evolving challenges, such as ransomware, advanced targeted attacks and the Internet of Things. The more recent awards include Kaspersky\u2019s Africa Partner of the Year 2019, 2020 and 2021, Kaspersky\u2019s Top META Learning Partner 2020, Sophos\u2019 Upcoming Partner of the Year 2020, and ESET\u2019s Best in the Biz Award 2021. AVeS Cyber Security also received prominent partner statuses across its portfolio, such as Microsoft Gold Datacentre Partner, DellEMC Gold Partner, Veeam Silver Partner and Sophos Platinum Partner.
Learn more about AVeS Cyber Security at https:\/\/aves.co.za\/<\/p>\n

CLICK HERE to submit your press release to MyPR.co.za<\/a>.<\/p>\n

Pages: Page <\/span>1<\/span> Page <\/span>2<\/a><\/div>\n

Source: MyPR.co.za<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Cybercrime and the risk it poses to companies have escalated massively over the past 24 months \u2014 putting the most valuable asset of a company, its data, at increased risk. Because of the rapidly changing cyber environment and the fact that companies are fast-tracking digital transformation, predicting the right cyber risk management approach for your […]<\/p>\n","protected":false},"author":1,"featured_media":205825,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","ngg_post_thumbnail":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[9021,1],"tags":[3257],"class_list":{"0":"post-205824","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-mypr","8":"category-south-africa","9":"tag-mypr","10":"entry"},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.myza.co.za\/press\/wp-content\/uploads\/2021\/10\/managing-the-predictability-of-cyber-risks.png","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts\/205824","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/comments?post=205824"}],"version-history":[{"count":0,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/posts\/205824\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/media\/205825"}],"wp:attachment":[{"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/media?parent=205824"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/categories?post=205824"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.myza.co.za\/press\/wp-json\/wp\/v2\/tags?post=205824"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}