OUR BLOG

The previous year was significant in many ways from the point of view of cyber security. First of all, the pandemic significantly affected the change of lifestyle, business and behaviour, which had its consequences for information security.

 

The increase in the number of attacks is something that has become a tradition, however, the past year was marked by the fact that the goal of the attack moved from financial to other areas of interest - theft of intellectual property and theft of personal data. What is worrying is the way the public accepts such events. In the past, the compromise of a small number of credit cards caused a great deal of public attention and entailed concrete steps, both by the regulator and by the bank's clients. The past year was marked by an incredible number of compromises of business and personal data, in various branches of industry - health, finance, air transport, public services. Over time, we have begun to accept such examples as common and that is something that must not happen. Once compromised data remains forever compromised, there is no way back to the old.

 

The global spread of coronavirus has also affected how organizations perceive security. With more workers being forced to work from home, exposure to attacks has increased dramatically, a fact to which many businesses have not had a ready response.

The quality of the tools and the sophistication of the attacks are getting better and better. It is becoming increasingly difficult to defend oneself when attackers have an endless portfolio of tools that they can easily and simply apply.

Despite the application of best practices and hard work, attackers still have to win only once to cause a catastrophic disruption or have a negative impact on critical infrastructure and data.

 

Looking ahead, we can predict the following with a great deal of certainty:

• The number of targeted attacks (targeted ransomware and spearphishing) will continue to grow

• The targets of the attack will move towards intellectual property and business and personal data

• Rationalization of the budget for information security is inevitable

• The lack of qualified staff will increase

 

All of the above will result in a greater shift of the market towards the information security services sector (MSSP), which, from the user's point of view, will solve a large part of the risks associated with digitalization in one simple move.

By hiring information security service providers, we get a lot of benefits:

• Certainty - we do not care about the availability and quality of the necessary material and human resources

• Reliability - the quality of services will never be lower than our needs

• Continuity with partly reduction of the costs that we would otherwise have to make in order to achieve the same goal.

 

Experiences and methods of combating the pandemic must be applied in the field of information security - just as the goal of a doctor must not be to "kill" the virus at any cost, including the cost of the patient's life, so the goal of information security must not jeopardize the smooth and continuous operation of business process. One of the most common answers to the question "what is the goal of information security" is "preventing attacks". The attack is very successfully solved by turning off the target resource, or turning off the information system in general, but is that an adequate response?

 

The primary task of us who deal with information security must be to attract and retain profitable clients for our employer. We do this by eliminating business risks in a way that must have a minimal impact on the smooth running of business processes.

 

 

Recent Posts