登录查看更多内容

Last updated on 2024年8月29日

Your facility's cybersecurity measures have been breached. How will you prevent future incidents?

由人工智能和领英社区提供技术支持

Discovering your facility's cybersecurity has been compromised is a daunting scenario. It's crucial to act swiftly to prevent future breaches. As a facility manager, you're tasked with overseeing the physical infrastructure and ensuring operational continuity, which includes cybersecurity. While the term may evoke images of firewalls and anti-virus software, in the context of facility management, it extends to managing access to physical assets and integrated systems that may be vulnerable to cyber threats. Now, let's explore how you can bolster your defenses against such incidents.

此文章中的业界达人

由社区从 7 条内容中精选。了解更多

Ravi Rangarajan

Cybersecurity & Cloud Security Leader | GRC & Risk Management Expert | CISA, CISSP, CCSP | Program Management & Six…
Jeyaseelan Muthumanickam

Chief Information Security Officer Asia Pacific and Middle East

1 Immediate Response

Your immediate response to a cybersecurity breach is critical in mitigating damage. First, isolate affected systems to prevent further unauthorized access. This may involve shutting down certain areas of your network or disconnecting devices. Notify your IT department or cybersecurity team, if you have one, to begin an assessment. It's vital to document every step taken, as this will be important for both recovery and legal reasons. Remember, transparency with stakeholders and regulatory bodies is key, so communicate the breach appropriately while ensuring you don't disclose sensitive information that could exacerbate the situation.

添加您的观点

Ravi Rangarajan

Cybersecurity & Cloud Security Leader | GRC & Risk Management Expert | CISA, CISSP, CCSP | Program Management & Six Sigma MBB
举报内容
Identify the root cause of the breach. The breach could be due to weakness in the existing controls. Take measures to bolster the security controls. The breach could be due to an entirely new attack, which the organization is not aware of. Check whether there is any misconfiguration in the SIEM solution, which could not identify the attach, if you have SIEM implemented. Strengthen the organization’s threat landscape. Aware and beware of the surroundings, be open to receive the threat information from various sources and evaluate organization’s standing against the received threats. All the above requires a competent and highly motivated team to handle, as it is a team effort.

已翻译

赞
Jeyaseelan Muthumanickam

Chief Information Security Officer Asia Pacific and Middle East
举报内容
Organisation and prior testing of the local crisis committee reaction is key to knowing responses required by stakeholders. in order to do that put together a crisis management team and have exercises on most likely scenarios at frequent intervals.

已翻译

赞
Darren S.

Manager, Information Security, Global Security Advisory, Industry and CMMC Program Lead at DXC Technology
(已编辑)
举报内容
Retracing the steps an attacker took during a successful breach can uncover many open issues that can be identified in real time to trigger alerts and investigations and stop the attack as it's happening. Real-life career example: My company's web server was hit with SQL Injection, which bypassed the application server logic and allowed the attacker to directly query a top-secret database, national security data, in fact. Legacy application, literally millions of lines of code, and so many injectable fields we couldn't fix fast enough. So I wrote a monitoring script to intercept all inputs and ensure no SQLi commands exist before passing on. If found, alerts fire and session switched to a honeypit for further analysis and evidence building.

已翻译

赞

2 Risk Assessment

After a breach, conducting a thorough risk assessment is paramount. This involves identifying vulnerabilities in your facility's systems that were exploited and assessing the potential impact of the breach on operations and data integrity. Engage with cybersecurity professionals to review your current security measures and pinpoint weaknesses. This assessment should not be limited to digital assets but also consider physical security controls that can be integrated with your cybersecurity strategy, such as secure access points and surveillance systems.

添加您的观点

Jeyaseelan Muthumanickam

Chief Information Security Officer Asia Pacific and Middle East
举报内容
Engage local stakeholder team with business to clarify the risk to business. Have a infrastructure lead and application lead involved as contributors.

已翻译

赞

3 Update Protocols

To prevent future incidents, updating your cybersecurity protocols is essential. This means revising passwords and access codes, ensuring they are complex and changed regularly. Implement multi-factor authentication (MFA) for an added layer of security. Additionally, update your software and firmware to the latest versions, as these often include security patches for known vulnerabilities. Establish a protocol for regular updates and ensure compliance across all departments. Training staff on these new protocols is also a critical step in fortifying your facility's defense against cyber threats.

添加您的观点

Jeyaseelan Muthumanickam

Chief Information Security Officer Asia Pacific and Middle East
举报内容
We can think of this step only after the remediation and as a learning out of this experience so that this issue is never repeated.

已翻译

赞

4 Regular Training

Your staff are the first line of defense against cyber threats. Regular training sessions should be conducted to keep them informed about the latest cybersecurity practices and potential threats. This includes teaching them how to recognize phishing attempts, the importance of not sharing passwords, and the correct procedure for reporting suspicious activity. Make sure that everyone understands their role in keeping the facility secure and that they are aware of the protocols in place to protect against and respond to cyber incidents.

添加您的观点

Jeyaseelan Muthumanickam

Chief Information Security Officer Asia Pacific and Middle East
举报内容
Depend on experts to define scenarios for each type of attacks that can happen. Regulators are very good in deducing scenarios of each industry.

已翻译

赞

5 Invest in Tech

Investing in the right technology can significantly enhance your facility's cybersecurity. Consider advanced intrusion detection systems (IDS) and intrusion prevention systems (IPS) that monitor network traffic for suspicious activity. Deploy endpoint protection to safeguard individual devices connected to your network. Additionally, utilize security information and event management (SIEM) systems for real-time analysis of security alerts generated by your network hardware and applications. These technologies can provide an early warning system against potential breaches.

添加您的观点

Jeyaseelan Muthumanickam

Chief Information Security Officer Asia Pacific and Middle East
举报内容
Review the MITRE attack and defend framework to arrive at all kill points and the necessary defense tools discussed. Have POC with various tools and the results before spending resources on them.

已翻译

赞

6 Ongoing Vigilance

Lastly, maintaining ongoing vigilance is crucial for preventing future cybersecurity incidents. This means regularly reviewing and updating your cybersecurity strategies to adapt to new threats. Stay informed about the latest cyber threats and trends in facility management security. Establish a culture of security within your organization where everyone takes an active role in protecting the facility's digital and physical assets. Regularly test your systems with penetration tests and security audits to ensure that your defenses remain robust.

添加您的观点

Facility Management (FM)

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

Your facility's cybersecurity measures have been breached. How will you prevent future incidents?

1

2

3

4

5

6

1 Immediate Response

2 Risk Assessment

3 Update Protocols

4 Regular Training

5 Invest in Tech

6 Ongoing Vigilance

Facility Management (FM)

给文章评分

感谢您的反馈

更多Facility Management (FM)相关文章

更多相关阅读内容

Your facility's cybersecurity measures have been breached. How will you prevent future incidents?

1

2

3

4

5

6

1 Immediate Response

2 Risk Assessment

3 Update Protocols

4 Regular Training

5 Invest in Tech

6 Ongoing Vigilance

Facility Management (FM)

给文章评分

感谢您的反馈

查看其他技能