If cyber attacks seem to be escalating, it’s because they are. Every day seems to bring news of yet another major data breach, and increasingly it’s happening to to big companies that you would expect to have watertight information security.

Cyber criminals are malicious, sophisticated, organized and innovative. While organizations are still using single-focus solutions to combat specific attacks, attackers are striking across multiple layers, using their initial compromise to establish a beachhead, from which they can launch subsequent attacks.

Organisations that have strong security in certain areas, could have vulnerabilities in others.

If we relate this to a physical security example, it would be like failing to lock your front door because you have a fence.

Organizations need multiple layers of defense

It takes many technologies and processes to provide comprehensive risk and security management.

Layered security or ‘defense in depth’, is a concept of effective security posture, employing multiple tools and different techniques to slow down or stop an attacker.

Some of these layers include:

  • Physical Security – Hacking into network systems is not the only way that sensitive information can be stolen or used against an organization. Physical security must be implemented correctly to prevent attackers from gaining physical access, and then accessing what they want from within the trusted network.
  • Perimeter and Network Security – The perimeter is now much more complicated than it once was and cannot be protected just by a firewall anymore. Other systems and processes, like Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), and network segmentation also play important roles.
  • Secure Endpoints – Every device that connects remotely to the network can be a potential entry point for security risks. Laptops, USB drives, tablets, and smartphones can all store and access sensitive information. Techniques like updating software, using antivirus programs, and implementing Multi-Factor Authentication help make sure a device doesn’t become a vulnerability.
  • Application Security – Make sure you are developing applications that are designed to be secure and follow the OWASP controls . When using 3rd party services or software, be sure to vet their security thoroughly before integrating into your systems.
  • Data Security – Depending on what you need to do with your sensitive data, you have a choice of tools available to secure data (e.g. Hashing or encryption ), but never let it be stored on a system unprotected.

Back to the physical security example

If an intruder gets through a hole in the fence, they have to make it past the attack dogs, then the security door, then the locked door, get past the security sensors and CCTV cameras undetected,only to find treasure hidden under the bed.

You need to make sure all security layers work well together by implementing these underlying principles:

  • Actionable plan – A sound security plan is the first step towards a multi-layered defense system
  • Policies & procedures – Comprehensive policies and procedures are the groundwork on which all actions should be based.
  • Education and awareness – Security-aware employees can be one of the most effective deterrents to malicious threats, but also the weakest link if they don’t follow procedure.
  • Monitoring / Detection – Although you may have prevention measures in place, monitoring and detection are essential. Continuously monitor all systems, analyze logs and look for unusual activity.
  • Continuous maintenance – The job is never done. The security environment is changing rapidly. What was secure yesterday could be vulnerable today. Continuously check systems for vulnerabilities, learn about new threats, as well as patch and adjust defenses as needed.
  • Incident management – Establish good incident response and disaster recovery plans. You don’t want to be developing your plans during a crisis. The management of an incident often has more impact on a business’s reputation than the incident itself.
  • Remediation – Fix everything, big or small. What may seem insignificant in isolation, could form an essential part of the security arsenal. Every element represents another layer to break through.

Unfortunately, even with the most amazing security in place, it just takes one person to undo it all. That’s why building a Security Culture is so important.

Back to the physical security example

One of the easiest ways to circumvent security is for the criminal to be friends with the homeowner. You’ve invited the intruder into your house and bypassed all the system security for them and maybe even given them a cup of tea to welcome them

The target is everybody and everything! Attackers throw a wide net, hoping for any takers. Organizations need to be prepared on all fronts.