• Home
  • Privacy Policy
  • Ad Rates
  • Submit News
  • Contact Us
The Eagle Online
  • Home
  • News
  • Sport
  • Politics
  • Column
  • Business
  • Life & Style
    • Crime
    • R&D Health
    • Diet and Fitness
    • Intimacy
  • Entertainment
    • Photos
    • Fashion
    • Movies
    • Music
  • Advert Rates
  • Contact Us
No Result
View All Result
  • Home
  • News
  • Sport
  • Politics
  • Column
  • Business
  • Life & Style
    • Crime
    • R&D Health
    • Diet and Fitness
    • Intimacy
  • Entertainment
    • Photos
    • Fashion
    • Movies
    • Music
  • Advert Rates
  • Contact Us
No Result
View All Result
The Eagle Online
No Result
View All Result

Avoiding security complexities, by Oluwafemi Anthony

The Eagle Online by The Eagle Online
October 17, 2020
in Column
4 min read
0
Avoiding security complexities, by Oluwafemi Anthony
Share on FacebookShare on TwitterWhatsApp

RelatedPosts

Artificial Intelligence enhances access to information — NITDA

ICAN unveils new exam syllabus, signs agreement with tertiary institutions

Four simple steps your business can take to retain top talent, by Andrew Bourne

Many years ago, the firewall was everything. Defence-in depth was a concept defined as layered defence with multiple firewalls on the path. Behind the firewall was a fortress. Organisations designed networks with strong perimeters and demilitarised zones to ensure the crown jewels were well-protected. Attackers had a difficult time trying to break into the firewalls.

On the physical layer, Network Admission Control technologies were implemented to prevent intruders from having direct access into the network by preventing them from plugging unauthorised devices into the network. Before a device was admitted, it had to meet a minimum requirement defined by the organisation.

Those years are gone and maybe gone forever. Cloud computing, Bring Your Own Device, Artificial Intelligence, Internet of Things, VPNs and Remote Working Capabilities have dramatically changed the way businesses run. These technologies have introduced a level of innovation and disruption that were unimaginable only a few years ago. They have resulted in the collapse of the traditional network perimeter, thereby increasing the attack surface for cyber-attacks. Enterprise networks coverage is today being extended beyond our imagination – outside the traditional datacentres to smartphones, cloud platforms, mobile computers and IoT interfaces without geographical boundaries.

The bad guys now have a plethora of interfaces to launch their attacks on; they do not have to breach the network using traditional social engineering tactics physically. The recent changes in the work environment occasioned by the COVID-19 has further amplified the extension of network boundaries beyond the traditional data centres. Employees work from home with devices and connections into the enterprise networks that were not originally designed for such. Improvised connections were made to allow functionality because the pandemic came without announcement.

The danger this poses is that some of these end devices were not originally designed with security in mind. Even if security was a consideration, not so much for enterprise data protection. These devices are most of the time not hardened, and their owners may not understand the effects on the overall organisational security posture. A handful of these devices are installed with default passwords, and most times, these passwords are not changed during or after installation.

So it is easy to guess the password by manual methods or using advanced dictionary or brute force attack methods. Another risk posed by these endpoints is the lack of security updates and patches. Because they are sometimes not seen to be part of the enterprise network, they are not included in the patch management programme, and their presence introduces high-level vulnerabilities within the enterprise network. It then becomes easier to utilise malware that could tunnel through the firewall to breach the enterprise network, instead of spending months and years trying to break into the firewall or layers of firewalls.

In recent years, large-scale attacks have been launched using malware by exploiting known vulnerabilities and security gaps on endpoints. For example, the WannaCry, Petya and another variant of Petya, the NotPetya were employed to launch attacks on enterprise networks through vulnerable endpoints. Another danger with this trend is potential data leakage because these devices are used to either temporarily or permanently store organisational data.

There is also concern about device loss. If these devices are lost, there is a risk of exposing the organisation’s data to unauthorised entities, and that could both result in financial and reputational damage. These dangers are also expanded by the impact of the COVID 19 pandemic, where organisations made ad hoc improvisations to support businesses while employees work from home. As commerce resumes, organisations are beginning to discover some capabilities to support their businesses remotely, and they are also rethinking their business continuity strategies. For some businesses, this is not just a temporal shift, but a change which has permanently altered the operational procedures of the organisation.

Legacy cybersecurity strategies, techniques and investments will not be enough to mitigate the rising cybersecurity concerns introduced by this new way of working. Protection has gone beyond throwing in uncoordinated technical solutions and efforts. Organisations need to rethink a new approach for the protection of their assets within the ever-growing complexity both to remain afloat and also to derive commensurate Returns On Security Investments. A well-crafted strategy will ensure that cybersecurity efforts are coordinated within the enterprise, without duplication of efforts and resources, which will, in turn, drive down the cost of implementing cybersecurity initiatives.
To improve the security posture, organisations must do the following:

  1. Continuously monitor the devices, applications, and processes running on the network.

  2. Automate security monitoring and mitigation.

  3. Implement systems that are capable of automatic detection, isolation and containment of threats within the network.

  4. Ensure that monitoring covers event data, session data, and historical data on endpoint usages, such as past processes, network connections, and other information.
    Another measure organisations should take is reducing complexities. The extension of the network boundaries has not stopped organisations from using existing network solutions to protect the enterprise network.

However, in a bid to ensure the protection of the on-premise infrastructure and the ones beyond the organisational traditional network boundaries, organisations combine existing technologies with new solutions and the resultant effect is an increase in complexity. To effectively manage security, organisations should put measures in place to ensure a reduction in complexity and enhancing visibility. This can be achieved by unifying all efforts and technologies for managing both on-premise and off-premise infrastructure in a single platform. Beyond technical controls, organisations should develop procedures, standards, and policies for acceptable use of organisational resources.

For further information and engagements on the pcl. cyber security services, send an email to: [email protected]

Over the years, pcl. has supported organisations in developing tested cybersecurity and business continuity strategies to ensure that organisations can protect their assets. We provide managed security and assurance functions to ensure that operationally, organisations are well protected against destructive cybersecurity incidents.

. Anthony, a Digital Communications Executive, can be reached via 08166096074 and
[email protected].

Tags: Artificial IntelligenceBring Your Own DeviceCloud computingfirewallsNetwork Admission Control technologiesOluwafemi Anthony
Share28Tweet17SendShare7

Related Posts

Why law firms must be licensed — NITDA

Artificial Intelligence enhances access to information — NITDA

September 29, 2020
ICAN unveils new exam syllabus, signs agreement with tertiary institutions

ICAN unveils new exam syllabus, signs agreement with tertiary institutions

September 25, 2020
Four simple steps your business can take to retain top talent, by Andrew Bourne

Four simple steps your business can take to retain top talent, by Andrew Bourne

August 17, 2020
Union Bank posts N42.6b gross earnings in Q1 2020

Search for Union Bank’s next Robotics Legend is on

August 7, 2020
50 journalists lose job to robots at Microsoft

50 journalists lose job to robots at Microsoft

May 31, 2020
Federal Government

FG to equip 200,000 youths with digital skill in two years

November 12, 2019

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

COVID-19 Update

COVID-19: Kano directs civil servants to stay at home until further notice

Nonchalant attitude of residents to second wave of COVID-19 worrisome – Chairman

NDLEA seizes over 5,000kg illicit drugs in FCT in 2020 – Commander

NGF meets over second wave of COVID-19

COVID-19: One in every five persons tested last week was positive — PTF Chairman

Most Read

  • Gunmen kill policeman  accompanying election results in Ogun

    Kidnapped Catholic Priest found dead, brother’s fate unknown

    325 shares
    Share 130 Tweet 81
  • Bandits attack Mobile Policemen convoy, both sides suffer heavy casualties, policeman missing

    167 shares
    Share 67 Tweet 42
  • Breaking: NSCDC gets new Commandant General

    138 shares
    Share 55 Tweet 35
  • How we ruled land, sea, abducted expatriates — Capone

    160 shares
    Share 64 Tweet 40
  • Marwa reads riot act to drug barons, traffickers as he takes over at NDLEA

    111 shares
    Share 44 Tweet 28
  • Police nab notorious Abuja impersonator

    110 shares
    Share 44 Tweet 28

Ease Slash


Subscribe to Our Newsletter

Check your inbox or spam folder to confirm your subscription.







https://theeagleonline.com.ng/wp-content/uploads/2020/05/VID-20200510-WA0000.mp4

Chat with us now

Most Commented

  • COVID-19: No resumption date yet for students — Unilorin VC

    UNILORIN researchers recommend pineapple in COVID-19 management

    87 shares
    Share 35 Tweet 22
  • Pope promises end to ‘usual’ abuse cover-ups

    68 shares
    Share 27 Tweet 17
  • Wilshere re-joins Bournemouth

    69 shares
    Share 28 Tweet 17
  • ABU, KASU, other Kaduna higher institutions outline resumption plans, fix dates

    83 shares
    Share 33 Tweet 21
  • Niger, six other countries lose right to vote in UNGA — Guterres

    68 shares
    Share 27 Tweet 17

Latest

New Commissioner of Police assumes duty in Kebbi

January 19, 2021
Several Chelsea players test positive for COVID-19 – Media reports

COVID-19: Kano directs civil servants to stay at home until further notice

January 19, 2021
Biden calls out Trump for failing to condemn white supremacists

Biden to block Trump’s plan to lift COVID-19 travel restrictions

January 19, 2021
Several Chelsea players test positive for COVID-19 – Media reports

Nonchalant attitude of residents to second wave of COVID-19 worrisome – Chairman

January 19, 2021
Group urges lasting solution to century-old feud between two Enugu communities

Crisis brews in Enugu community over claims of village seniority

January 19, 2021




  • Home
  • News
  • Sport
  • Politics
  • Column
  • Business
  • Life & Style
  • Entertainment
  • Advert Rates
  • Contact Us

© 2020 Premium Eagle Media Limited.

No Result
View All Result
  • Home
  • News
  • Sport
  • Politics
  • Column
  • Business
  • Life & Style
    • Crime
    • R&D Health
    • Diet and Fitness
    • Intimacy
  • Entertainment
    • Photos
    • Fashion
    • Movies
    • Music
  • Advert Rates
  • Contact Us

© 2020 Premium Eagle Media Limited.

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.