Cybersecurity Needs Thorough Management

The biggest current problem with cybersecurity threats is that you need to keep up with the development of technology and the evolution of security threats, Mark Lamb points out in an interview for ICT Business. He added that numerous players in the public and private sectors are already behind and trying to catch up.

Under the influence of negative global economic trends, this gap is becoming more pronounced. As the key to success in increasing security, Lamb points out some simple steps such as turning off all services and options that provide potential security threats. It is essential to reduce the attack surface, says Lamb, who will hold a speech at the Adriatic MSP Summit.

How to educate business users about the importance of cybersecurity and raise awareness about the key risks they face?

By trying to make cyber simple to understand through visualization, KPIs, and linking cyber with business goals and outcomes.

How can specialists raise awareness about cybersecurity among private users and how can they help them to protect personal data and devices?

It helps to keep cyber security top of mind, and not create a fear culture. i.e. everyone is so afraid to make a mistake, it's counter-intuitive to good security. We have to be open, and honest and foster a culture of honesty. If users feel they have to hide something they did wrong, it is far more likely to result in an incident further down the line.

What are currently the most important threats and challenges in the field of cybersecurity, both for businesses and private users?

It is keeping up with the rapidly evolving threat landscape. Most organizations are behind already, and with budgets tight with the global economy slowing down, businesses are getting further behind all the time. Then there is the issue with the unrestricted use of AI by employees!

How can organizations and individuals proactively act to protect themselves from cyberattacks, and what are the key precautions to take?

Start by looking at what technology you are using and whether it is necessary. Have you taken a few minutes to remove old apps and software you no longer use? How about switching off features you do not use, or even know what they are? Like in any good security approach, whether it is in business or personal sphere, start by reducing your attack surface to as small as it needs to be. Then work on securing that attack surface as best you can with features like MFA, strong passwords, notifications of configuration changes, etc.

What are the latest innovations and technological trends in cybersecurity, and how can they help enhance the protection of information resources and personal data?

EDR is really starting to take hold now, and IAM solutions are becoming increasingly common as organizations try to get a handle on the sprawl of user accounts across disparate systems. Without control of these identities, controlling access to data is undermined. I also see XDR still on the horizon for most SMEs but it will become increasingly common over the next 5 years as organizations try to get better at detecting anomalous events across their broad stack of technologies.