How Are You Defending Your Business?

It has been a while since I wrote an article. I hope you and your family are doing well through these crazy times?

I have been focusing on personal development and one of the courses I'm taking is from Jim Kwik called “Kwik Thinking”. One of the quotes he uses is “Questions are the answer!” If you ask yourself really tough/hard questions your mind will search for the answer(s). Also, he talks about what is the most dominate question you are thinking about will be where you focus most of your energy. My daily question I am experiencing or thinking about all day is "How do I help the companies I work with protect their Business?"

Hearing the terrible situations that organizations are going through from a Ransomware attack, Business Email Compromise “BEC” or a Network Intrusion is extremely hard to hear. Listening to how it effects their business, employees, customers, suppliers, vendors…etc. These Cyber Criminal truly make this the worst day, week and even month for these business owners lives.

As an Cyber Security Incident Responder it is my job to listen to these terrible incident and come up with a plan of action to quickly help these organizations restore their business continuity. All while going through the Incident Response life cycle, and putting security controls in place to help the organization defend themselves against future attacks.

First tough question: "Why does this matter to you?"

In Cyber Security sales, training, courses...etc. we have all hear "It's not if you get attacked, it's when?" Before I became a Cyber Security Incident Response lead, I didn't realize how true this statement really was. Working for the last five months as a Cyber Security Incident Response lead it's sad to say that I am seeing more and more organization being attacked. The organizations as you know did not expect it, they just came in one morning and they were attacked. Doesn't matter the size of the Business, Cyber Criminals are going after any organizations they can compromise.

My recommendation is as soon as possible sit down with your team and go through a table top exercise of a Ransomware attack. Go step by step through the entire process to see if there are any gaps in the teams response, recovering your backups and restorations of your systems.

Moving forward I will be writing more articles to help organizations as much as I can to protect themselves.

Please let me know if you have any questions.