BRITISH COLUMBIA – Given the complexities of different industries and legislation pertaining to them, every entity is responsible for its own organizational and business policies pertaining to cybersecurity. A layered approach to security is critical so that protection doesn’t get in the way of productivity. Navigating the ever-changing cybersecurity environment is critical to keeping your business running. Compliance, overall security, and the ability to obtain adequate cyber-insurance coverage can all be enhanced by this layered approach:
• Knowing your environment: Audit your hardware and software assets, as well as cloud-based applications, for insight into where threats might exist. Replace older devices – older, noncompliant hardware has security vulnerabilities that leave your business open to greater risk. Plan and budget to replace older equipment by instituting a hardware replacement policy.
• Securing and monitoring your network environment: From firewalls to remote access, keep your internal network protected while maintaining reliable, secure connectivity. Monitor devices on your network and lockdown access to network equipment. Ensure your hardware firewalls are current and on the latest supported firmware. Configure notifications so that you are aware when a problem arises.
• Creating a security-first environment: Train your users to follow best-practice guidelines for safe web browsing and email usage, including malware and phishing awareness. Create a policy that highlights the secure use of technology, including password guidelines, technology usage off-site, and data privacy.
• Implementing tools:
o Multi-factor authentication (MFA) which blocks unauthorized login attempts, even if hackers have your current password.
o Endpoint Detection and Response (EDR): Continuous device threat monitoring in real time.
o Identity Threat Detection and Response (ITDR): Protect user identities from being compromised.
o DNS Filtering and Web Protection: Block access at the network level, stopping threats before they ever reach your users.
• Planning for the unexpected: Data loss, whether it’s your own personal data or your organization’s data, can be devastating. With the very real threat of malware, ransomware, or even a user accidentally deleting a critical file, having a dependable and redundant backup system is crucial. The best solution is a layered approach consisting of three backups:
o Two local backups: Backup your device, using two different backup software on two different local devices which could be a NAS (Network Attached Storage) device and an external hard drive.
o Third offsite backup: to a geographically separate location from your local backups. This ensures redundancy and isolation if one or both of your local backups, is destroyed, or otherwise lost. You still maintain a copy of your data. Following these recommendations and layered approach will ensure a more secure and productive environment for your business, its data and your staff.
Vancouver Island-owned and operated, Mosaic is a team of IT professionals who take pride in providing friendly, reliable support.
