Cyber Security

Cyber security or IT security is the protection of systems, networks, programs, devices and data using technologies and controls that are directly implemented to combat cyber attacks.

Anitmalware software is a program specifically designed in the detection, prevention and removal of malicious software. Antimalware can be installed on an individual computing device, server or dedicated network appliance. It operates in three main ways, signature and behaviour based detection and ‘sandboxing’. For full protection you want to implement all three of these methods. 

IT Security monitoring is the collection and analysis of information on your network, designed to track behaviour or unauthorised changes on your network. It defines what actions trigger alerts and what subsequent measures will be taken.

Vulnerability takes an inventory of the network. Devices, virtual machines, containers, firewalls, switches and printers etc are al logged. For each of these devices further information about them including operating system, software installed and any other relevant attributes is stored. Using this inventory each item is then checked against vulnerability databases to monitor if they are subjectable to an attack. It’s an essential part of a business’ operation that vulnerability scanning is addressed on a regular basis.

An IT security assessment is an umbrella look at the entire organisations IT security eco system. It’s a periodic exercise to look at vulnerabilities and preparedness when it comes to attacks. They can be conducted internally with your IT team or with third-party assessors. 

Email filtering is the process of monitoring inbound and outbound email traffic within an organisation. It includes the tracking and quarantining of emails that can contain content that is spam, inappropriate, virus infested or acting as an imposter. It can be deployed through cloud services or on-premises applications depending on requirements.

Single sign-on or SSO is a method of authentication that allows users to sign in with one set of credentials to multiple applications or websites. It’s an effective way to keep your team secure bu removes the juggling of multiple passwords and accounts.

Dark web scanning is a proactive look at the dark web to find possible places where data breaches have taken place and your personal details, usernames and passwords have been exposed to the internet. This can often occur without your knowledge as non-reputable companies that experience data breaches will avoid sharing this information with the public. Identifying a common password that has appeared in one of these breaches is important as attackers will use it to gain access to other application or webservices that haven’t experienced the same breach in security.

Compliance tracking is a core responsibility of any developing company. It aims to ensure that IT services, processes and systems are pro actively managed in accordance with any government or other organisational bodies guidance. 

Mobile device management (MDM) is the monitoring and securing of any mobile device (including laptops, smartphones and tablets). Any device that accesses business-critical data should be actively managed and monitored so that threats can be reduced and removed. Additionally if an attack takes place MDM allows for the remote lockdown and deletion of the device or sensitive data on stored on it.

Web filtering is a Pro Active blocker that prevents access to malicious URLs and websites and stops browsers before they load the malicious content. It’s an active content control software that operates as a middleman between the user and a website.

Penetration testing can be considered as putting your I security system to the test. Pitting real world scenario attempts at breaching some or all of your security. Implementation of this might resolve around tools/programs as well as social engineering techniques.

A Cyber incident response plan usually consists of 6 distinct sections and it’s aim is to help the IT team and staff recognize and actively start dealing with cyber security incidents. The 6 phases consist of preparation, identification, containment, eradication, recovery, review.