Cibersecurity

Data security

The most important active that has a company is its data, both digital and physical. We must ensure it is properly secured.

• Data security are those preventive and reactive measures that guarantee:
  • availability: both users and processes must be able to visualize and access data when they need to.
  • confidentiality: data is only served to those users and processes who really need it.
  • integrity: we must ensure information is not altered unproperly.
  • traceability: data access must be traced and logged to avoid unwanted accesses.

Consequences of intrusions

• Bad company image
• Legal consequences
• Impact on the stock market

types of attacks

• Phishing: entity (company, person) impersonation through any channel (mainly email) to obtain sensitive information.
• CEO impersonation fraud: type of phishing where somebody impersonates a Chief role of the company in order to get information.
• Ransomware: encrypt company data and request a ransom
• DoS: Denial Of Service. Attack where massive amounts of requests are made to the servers, making them inaccessible.

Motivations of the attacks:

• Opportunistic: inexistent security
• Espionage / competence / financial
• Data robbery
• Workers dissatisfaction
• Hacktivism

Implantation phases

• Company doesn't not known what it is, no importance is given or company is not aware
• company begins to understand what it is
• they are beginning to integrate it through consultancy
• company is staring to manage cybersecurity internally
• Company has a culture, policies, is applied globally and is aligned with business

To implant it we have to be aware of business type, its nature, requisites and technologies company uses.

Hardening

To set firmness in the control of the access to our platforms, we must consider these premises:

• virtual users of the services must have their permissions limited to their responsibilities
• information doesn't have to be in one server
• most common ports (apart from the required ones, such web) must not be exposed publicly nor permanently
• Apply a defense in depth, establishing security measures to protect from attacks to our physical network, information and applications
• EDR systems to early detection of threads

Hardening methodologies:

• ISO 27001
• OWASP Top 10
• MITRE
• ATT&CK
• Pen testing
• S-SDLC
• Stride Thread Model
• Security auditions
• Have a security role, Chief security information Role (CISO)