The Cyber Review: NCSC Free Cybersecurity Tool, Build A Long-Term Plan

March 2, 2021
Written by Farah

1. Free cybersecurity tool aims to help smaller businesses stay safer online

The tool by the National Cyber Security Centre (NCSC) helps small businesses create a strategy to protect themselves from cybercriminals. Many small businesses think they are not at a high risk of getting attack compared to larger businesses however, the numbers show otherwise. Attackers could be trying to attack a small business in a larger supply chain attack.

The tool provides a questionnaire followed by customised advice on how the business should do better when it comes to cybersecurity.

The NCSC will be launching a version of the cyber-action plan designed to help individuals and families protect themselves from cyberattacks at some point in the future.

2. Cybersecurity Challenges: Understanding the What, How and When of Change

One of the biggest challenges has been the remote work force due to the pandemic—as we have discussed before. This has led to an increase in the attacks and threats by cybercriminals. Risks includes: exploiting unpatched systems, bypassing inadequate controls, and capitalizing on authorization creeps/drifting defenses.

Tips to keep in mind while facing cybersecurity challenges: ensure timely patch process on remote assets, have proper secure laptops and devices, analyze suspicious files right away before they can cause harm, and proactively look out for harmful or suspicious activity.

3. Building a cybersecurity strategy for the long haul

Cybersecurity focuses on the “now” to stop and defend from attacks. However, long-term strategies are much needed in the industry.

  • New threats, same attack vectors: criminals are using similar tactics and techniques whereas the cybersecurity specialists are stuck in the “short-term strategy” mindset to deal with the attacks. They are then left playing catch-up with the cyber criminals to protect their systems.
  • Future-proof your cybersecurity: advances in technology, transfer speeds, data analytics, machine learning are all areas that can make a difference to organizations when it comes to future proofing their cybersecurity systems. Businesses can benefit from the insights they provide.
  • The road ahead looks just as familiar: Although cyber criminals are working hard to exploit employees, networks, and gain access to valuable information or finances, it is still possible to predict and plan ahead. New threats will appear but they will likely be similar.