Cibersecurity

Data security

The most important active that has a company is its data, both digital and physical. We must ensure it is properly secured.

Data security are those preventive and reactive measures that guarantee:
- availability: both users and processes must be able to visualize and access data when they need to.
- confidentiality: data is only served to those users and processes who really need it.
- integrity: we must ensure information is not altered unproperly.
- traceability: data access must be traced and logged to avoid unwanted accesses.

Phishing: entity (company, person) impersonation through any channel (mainly email) to obtain sensitive information.
CEO impersonation fraud: type of phishing where somebody impersonates a Chief role of the company in order to get information.
Ransomware: encrypt company data and request a ransom
DoS: Denial Of Service. Attack where massive amounts of requests are made to the servers, making them inaccessible.

Motivations of the attacks:

Company doesn't not known what it is, no importance is given or company is not aware
company begins to understand what it is
they are beginning to integrate it through consultancy
company is staring to manage cybersecurity internally
Company has a culture, policies, is applied globally and is aligned with business

To implant it we have to be aware of business type, its nature, requisites and technologies company uses.

To set firmness in the control of the access to our platforms, we must consider these premises:

virtual users of the services must have their permissions limited to their responsibilities
information doesn't have to be in one server
most common ports (apart from the required ones, such web) must not be exposed publicly nor permanently
Apply a defense in depth, establishing security measures to protect from attacks to our physical network, information and applications
EDR systems to early detection of threads

Hardening methodologies: