Every data is created different. This is the reason why organizations, nowadays, are more focused on risk based security where the crown jewels get more rigorous protection than, say, humdrum, ordinary files.
This has become very critical because hackers have gotten very good at their jobs, of course, this is a job for them. Hacking has become a the occupation of skilled, organized crime.
What if Hackers get into your System?
Though create and maintain perimeter defenses, like firewalls, which is designed to keep them out, may hold them for some time but not forever. So smart organizations are assuming that hackers may already have gotten in and working hard on it. In this way minimizing the damage that can happen in future.
Just take an example of a jewelry shop, all precious diamonds, golds and stones are kept in a special locked cascade. In the same way, all the important data should be kept under a very good security.
Don’t forget to do the same about data assets
Always remember to put the precious information behind layers of security like, special log-ins and passwords to access the really important stuff. For example, critical data: non-public financials, trade secrets, top secret intellectual property. Anything that comes under the title of ‘top secret’ should go, must be kept under higher level safeguards.
If you do it with all truly valuable information, if the data get hacked by hacker, he may not be able to access it. The basic thing is, the more important the data, the more protections need to surround it. Just imagine the risk of this data, what if it falls into the wrong hands?
Tools can help to monitor access
Just search for anomalous behaviors. For example, imagine one CEO just accessed multiple key customer files, at midnight, on a Saturday, though he’s never done this before? At such times you should have a system that sounds an alert and even shuts down the CEO’s access. The thing is, if it is the real CEO, he will know who to call to get back in, but if it is a criminal he won’t.
Additionally, it’s wise to use tools to monitor data exfiltration–or data going outside the system. Hackers usually do not hack to read, but they export key files, and smart organizations are increasingly making use of log files that track activity in the network. In this way they detect the presence of hackers who give themselves away through data exfiltration.
Always be prepared
Just remember that this fight is never ending, hackers never give up. Most of the time, security professionals recount cases where persistent attackers tried for a year or sometimes more than that and kept at it until they got in. Always keep a watchful eye on your network and your data, and try to always be improving. This is the way to stay ahead of hackers.
These were the ways how to be prepared for Risk-based Security, now there comes part of implementation. So here are some ways how to implement them.
Ways to implement Risk-based Security
What you have to do is, implement a simple process to identify, analyze and prioritize risk without significant investment in time or money.
Take a look at the questions first
While doing this, first of all, organizations have to think about three basic questions, first is- What are your key information assets, where are they and who owns them? Second- Who has legitimate access to these assets and how are they protected? And third- Who may wish to steal or damage your assets, why and how? This threat analysis, in the form of a roundtable discussion led by an experienced information security practitioner, can start to answer these questions.
Identifying threat sources and threat agents
First of all, you have to identify threat sources and threat agents, the adversaries who want to steal or damage your assets. This will include, competitors, disgruntled employees, activists, foreign governments and even non-hostile threats, such as untrained or reckless employees and business partners. You can use You can use Threat Agent Risk Assessment (Tara), of Intel, which is totally free.
Discussion with the company people
The second thing is- discussion. Around threats quickly broadens into an exchange of views on known vulnerabilities, and what information is sensitive and valuable to the business. In a small amount of time we can prepare a Flipchart with potential scenarios, and the individuals in the room begin to think in a risk-based way.
Audit of the technical controls
One more thing can be done like, an audit of the technical controls can be made, which will be carried out to ensure they are working as expected, and staff would be reminded of their responsibilities to safeguard the information against any leak.
These Risk-based security remedy’s can definitely improve the security of organizations. It is only the matter of implementation.
