What is your cyber condition?

What is your cyber condition?

Organizations should operate with the impression that they "are" and "will" always be under attack. If the bad guys are not actively breaking in, your good guys should be, it doesn't matter who. What matters is the ongoing process of breaking-in to build up your cyber "condition."

"Cyber Conditioning" requires intensive training similar to what professional fighters do in preparation for their next fight. It's the training that makes the fighter more robust and less fragile when taking punches. Conditioning develops when you routinely put the fighter under extreme mental and physical stress.

In our cyber world, the ultimate goal is to continually introduce your organization to various attacks so that when the real one hits, your organization should go like "Is that all you got!" I have seen worse than that.

Remember, conditioning is not how good you are in blocking attacks before they reach your systems. It's the total opposite; conditioning is intentionally allowing simulated cyber-attacks to hit your systems while your "guard down" and continue to operate in your full capacity for a longer period of time. This is when you develop self-healing capabilities and recovering mechanisms.

It goes without saying, besides conditioning, you must not let your guard down and defend yourself at all times. This is cyber defense but that is a different story

-----------------------------------------------------------------------------------------------

Would you like more interesting articles?

#Obscurity #Secrecy #Security #cybersecurity #informationsecurity #cloudsecurity #securitymanagement #infosec #incidentmanagement #cyber #cyberattack #threats #cyberdefense #privacy #cyberwarfare #computersecurity #coronaravirus #cyber #cloudsecurity

要查看或添加评论,请登录

Youssef Elmalty的更多文章

  • Security by Reassurance

    Security by Reassurance

    With the current wide access to information, many of us are able to acquire and analyze information that can be used in…

    26 条评论
  • Place your bet, Security or Compliance?

    Place your bet, Security or Compliance?

    Many believes that security is binary game that will lead you to win or lose. Well, this is not true.

    27 条评论
  • How to specialize in cybersecurity?

    How to specialize in cybersecurity?

    I have received several inquiries from computer science students and fresh graduates about which specialization they…

    6 条评论
  • The art of Hunting - Exposed!

    The art of Hunting - Exposed!

    Oftentimes, people presume that cyber threat hunting is a process that is highly dependent on tooling. While tooling is…

  • If you are not hunting, you will be hunted!

    If you are not hunting, you will be hunted!

    We are good. We have checked all our detection and monitoring tools, nothing abnormal.

  • You can only fight the way you practice

    You can only fight the way you practice

    In cybersecurity, many tend to believe that having incident response plan hanging around waiting for the response team…

  • Why Compliance does not equal security?

    Why Compliance does not equal security?

    Being compliant is a wonderful thing to do, and in many cases, you will have no choice but to comply to be able to run…

    18 条评论
  • Security is a journey not a destination!

    Security is a journey not a destination!

    Security is a state of being free from any predefined threats. The reason I choose the word "predefined" because…

    5 条评论
  • Are you looking for a new home?

    Are you looking for a new home?

    Yes, I am talking about homes today, but there is a catch at the end. Below are some fundamental measures that you…

    3 条评论
  • Should you invest in cybersecurity?

    Should you invest in cybersecurity?

    I get it, the cost associated with security investments is high, but I can guarantee you that the cost of doing nothing…

    2 条评论

社区洞察

其他会员也浏览了