Issue link: https://www.e-digitaleditions.com/i/1386104
July/August/September 2021 I 67 Other companies that address cybersecurity as their core business are Sentinel One, Mandiant Advantages, CrowdStrike, and Carbon Black. These companies address critical cybersecurity principles, such as asset inventory, vulnerability management, multifactor authentication, network segmentation, system backup, recovery and more. The key essential areas that some cybersecurity companies focus on include: 1 • Incident Response (IR): Rapid response, containment, and investigation with digital forensics and root cause analysis • Recovery Services: Containment of active threats, recovery, and remediation with speed and precision • Continuous 24/7/365: Managed detection, response, and remediation, backed up by a $1 million breach prevention warranty QUESTIONS TO ASK When considering an organization or company, what plans do they have to address cybersecurity? How would the organization fare in a cybersecurity attack? Taking the time to identify vulnerabilities, becoming more aware of issues, and educating the organization/ company is half the battle for answering these two very important questions. Hackers will continue to develop and perfect their skills to monetize their access, which is their ultimate objective. The year 2020 saw more intrusions than ever before, larger ransomware demands, and little opportunity for organizations to improve their security posture while keeping pace with the chaos brought on by the global pandemic. Enterprises in every vertical industry need to move forward from reacting to these breaches to continuous monitoring, detection, response, and optimization. According to a 2020 Cyber Frontlines Report, the following are key metric findings from a cyber services company: 2 • The volume and velocity of financially motivated attacks are staggering. Financially motivated attacks represented 63 percent of its services cases over the past year with 81 percent of financially motivated attacks involving the deployment of ransomware or a precursor to ransomware activities. • Buying technology alone is not enough—configuration, coverage and management matters. In at least 30 percent of incident response engagements, it was observed that organizations' antivirus solutions were either incorrectly configured with weak prevention settings or not fully deployed across the environment, which may have been a factor in the threat actor gaining and maintaining access. • Intrusions should not be thought of as a one-time event. Approximately 68 percent of those organizations that had an intrusion attempt experienced another intrusion attempt, which can be prevented with sound management of endpoint protection and remediation efforts moving forward. • Shifting to continuous monitoring and response changes the game. Rather than thinking of intrusion response as a one-off emergency activity, mature organizations should plan for real-time, continuous monitoring, and response. Some advanced cybersecurity managed service offerings can reduce significantly the average time to detect, investigate, and remediate.