How do you ensure that your cyber security gets the right attention?
Geplaatst op: 27 December 2023
Every organization should invest in cyber security, it’s the job of the CISO to present a convincing business case. A case should give insight in why an investment is necessary, but also why it’s beneficial. By adopting a “security first” perspective, compliance is often automatically covered. To properly complete this business case and help CISOs get started, we’ve set out the following steps:
1. Conduct a full audit
First, it’s important to conduct a full audit of the current security measures, the policy and any gaps or areas that need improvement. Look at where confidential and sensitive data is stored and who has access to it. Not all data have the same impact or level of risk. It’s wise to investigate this properly so you can use the available budgets as efficiently as possible. Internal threats are common and the risks of possible data leaks that are caused by it through malicious or even careless employees are often underestimated. The process of an audit is time-consuming but necessary to get a full view of the safety measures that already exist.
2. Expectations should be set from the start
Cyber security is neither a product nor a service; we advise to show that protecting the organization against loss is the only way to gain financial advantage. Try to communicate with the board using numbers. For example, show that an investment of €1, – could stop an incident that could cost the organization €10, -. By creating a business case that highlights both the Return On Investment (ROI) as well as security measures that can reduce the chance or impact, you’ll get the board on your side faster.
3. Choose de right areas for investments
To ensure that management can defend its decision to invest in security, you must first provide data that targets all threats identified in step 1. Threats like inadequate security, awareness and training of employees, process and policy that aren’t adequately applied and recorded or lack of backup and patch By providing a clear insight into the costs and benefits of investments, it’s easier to defend the effectiveness of the required investments.
4. Present a strong business case to the board
After creating a robust and compelling business case for the organization, you need to share the proposal with the board. When presenting this, keep in mind any questions that may be asked, the level of knowledge regarding cybersecurity and the place of focus. Make sure you have a solid narrative with all investments so the board can make a well-considered decision.
5. Cybersecurity, also in the long term
When submitting a strong business case for security buy-in, it’s important to align the plan with the risks, needs and compliance requirements of the organization. Every organization wants to be secure in the long term, but compliance requirements often keep them focused on the short term. In our view, this is a major pitfall. Organizations must create a connection between compliance and security if they want to protect their systems and data, especially in the long term.
Want to know more about how to approach this? Our experts are ready to answer your questions.
Also check out our brochure on the eCISO Service we offer. With it, you’ll always have your cybersecurity up to scratch!
What is a hacker able to see and/or do?
Geplaatst op: 27 December 2023
Hackers, cyberattacks, phishing E-mails. These days it seems like half of the news is about cyber attacks. Unfortunately, these types of happenings are indeed on the rise. Since there is still a lot of uncertainty about what exactly a hacker can see or do, we will tell you more in this article.
What is a hacker?
According to the dictionary a hacker is a person who uses computers to get access to data in somebody else’s computer or phone system (without permission). This means that if you’re able to get into someone’s laptop, you’re a hacker. At OpenSight we think this definition is a little too broad. There’s a significant difference between ethical hacking and hacking with malicious intent. For example, when someone tries to enter a system solely to find vulnerabilities in said system, this is not necessarily a hacker in our definition. We distinguish different types of hackers like Grey hat hackers, White hat hackers, Green hat hackers, Blue hat hackers and Red hat hackers. Every hacker has a different method or hacks with a specific goal in mind. In the previous articles on our website, we explain exactly what types of hacking there are and how you can protect yourself against a hacker or cybercriminal.
How can I check if I’ve been hacked?
But how do you know if you’ve been hacked? There are a few signals that show you that you’ve been hacked. Some examples below:
- Login problems: Suddenly you can’t get into your (social media) accounts, even though you’re using the right password.
- Warnings: A lot of companies send an E-mail if someone tries to log into your account. Aren’t you the one logging in? Then it could be possible someone is trying to break into your account.
- Slow electronics: Your laptops or phones are extremely slow.
- Pop-up spam: All of a sudden, your screen is filled with pop-ups. This is a form of adware.
- Weird chat messages: Your friends and family get weird messages from your account, and you didn’t send them. This is often a case of cybercriminals trying to get money via WhatsApp or other communication platforms.
- Encrypted files: Files that were previously open are now suddenly encrypted on your computer. This is a form of ransomware.
These are just a few examples of signs that could indicate that you’ve been hacked. There are also countless tools online that can help finding out whether you have been hacked. For example, do you want to know whether your email has been hacked? You can use the website ‘Have I Been Pwned?’, and it will check for you.
I’ve been hacked, what do I do?
Firstly, it’s important to remain calm. There are a lot of ways to get hacked, but it doesn’t automatically mean you are in danger. It is, however, important to take the right steps to decrease risks. Have you been hacked? First scan your device with a virus scanner, which detects ransomware and other suspicious software for you. Oftentimes a virus scanner will put suspicious files and software in ‘quarantine’. Deleting the file of the software from your device will be easier this way. In addition, it is important to change all your passwords in the event of a hack. As annoying as it is, this is the best way to keep hackers out and prevent real damage. Next to changing your passwords you should also ensure that software is always up to date. This keeps hackers from casually breaking into your devices. If a work computer or laptop has been hacked, you should always report this to your manager or supervisor and make sure that colleagues are aware. This prevents hackers from gaining access to multiple computers and sensitive data from company systems.
Should you recognize one of the above signals and suspect that you have been hacked? Make sure you consult an expert! If you haven’t encountered a cyber attack yet, it’s better to be safe than sorry. Always make sure that you protect your valuable data against cybercriminals and ransomware. Want to secure your data professionally and efficiently? Contact one of our experts!
What is a ransomware attack?
Geplaatst op: 27 December 2023
A large proportion of the working people have been working from home for the past two years. This means a large part of the business conversations and activities took place online. While this way of working had positive effects, it also opened the door for data leaks and cybercrime. In this article we’ll tell you everything about ransomware, what it is, how it works and what you can do against it.
What is malware?
Malware is an umbrella term for software like viruses, spyware, and Trojan horses. Malware usually ends up on a computer or network when employees click on a link or document that contains this software. Because many organizations’ work traffic has been from home in recent years, we are seeing an increase in malware attacks.
What is ransomware?
Ransomware is a form of malware. This form of malware ensures that people within the organization can no longer access important documents or processes that are essential to keep the organization running. Often a large ransom is demanded from the organization to regain access, hence the name. Here are some more types of ransomware that hackers can use:
- Screen locker ransomware: A form of ransomware that blocks the access to your screen.
- PIN locker ransomware: This one changes the pin code of your device, so you can no longer log in.
- Disk coding ransomware: This form of ransomware encrypts the Master Boot Record and other (file) system structures. As a result, you no longer have access to the operating system. As a result, you no longer have access to the operating system.
- Crypto ransomware: This is a pesky type of ransomware because it encrypts all user files on the disk.
What to do when a ransomware attack occurs?
Ransomware attacks have also been on the rise in 2022. According to research by cybersecurity expert Acronis global damage from ransomware is estimated to exceed $30 billion by 2023. If you must deal with a ransomware attack yourself, take the following steps:
- The first rule in case of a ransomware attack is to never pay ransom. This will only add fuel to the fire. Cybercriminals will see you as an easy target and will have extra reason to carry out more attacks. Remember: these hackers are criminals! You have no guarantee that they will hold up their end of the bargain.
- Is only one computer or device within the corporate network affected by a ransomware attack? Isolate this device immediately! You can do this by disconnecting the network connection.
- Encrypted files can be ‘decrypted’ with recovery programs, also known as decryptors No decryptor available? In that case backups are the only way to get files back. Make sure you regularly make backups of your documents.
- When a ransomware attack only encrypts specific files involving personal data, then it is officially seen as a data breach. You have to report this to the Data Protection Authority within 72 hours.
- We’ve mentioned it quite a lot, but it can’t be repeated too often: Make sure that existing software, applications, and devices are always up to date. That also means the operating system!
How to protect your organization from ransomware?
Unfortunately, it’s impossible to completely rule out a ransomware attack. The right security software and security measurements, however, go a long way. The most important aspect on how to survive a ransomware attack is timing. The earlier you intervene, the better. The above tips help detect and combat an attack early. We’d like to emphasise it once more: regular backups will significantly reduce the impact of a ransomware attack!
Want to know more about the impact of ransomware attacks on your company or how you can better protect important data against cybercriminals? Please contact one of our experts. We are happy to help!
What is a DDoS attack?
Geplaatst op: 27 December 2023
What is a DDoS-aanval? Perhaps one of the most asked cyber security related questions of the year. To get straight to the point: DDoS is the short hand for ‘Distributed Denial of Service’. This is an attack hackers use to temporarily take systems or applications offline. In this article we’ll take a deep dive into the world of DDoS attacks and tell you exactly how to protect your organization against such an attack.
What is a DDoS attack?
When a big amount of traffic gets send towards a network or server it hinders its operation. In the worst case the network or server stops working altogether. This is why the term ‘Distributed Denial of Service’ is used, a network or server is unable to deliver services. That’s exactly what the perpetrator wants. Unfortunately, an online DDoS attack can be staged by anyone. Whether that is to outsmart a competitor, prevent access to specific data or information or simply to nag someone out of revenge. When professional cyber criminals perform a DDoS attack it’s usually with the goal of getting money. DDoS ‘attacks’ can also be caused when too many people try to get access to a website at the same time. This often happens with concert tickets and limited offers. This does not necessarily qualify as an attack but can have the same effect.
How long can a DDoS attack last?
Although the intention behind a DDoS attack isn’t always malicious, the impact of such an attack is. The duration of a DDoS attack determines the actual (financial) costs. According to the cybersecurity expert Kaspersky the average duration of a DDoS attack in 2021 was about 30 minutes. Doesn’t seem so shocking, right? Well, the bad news is that DDoS attacks are lasting longer and getting more and more complex. The average duration of a DDoS attack in 2022 already lasted a hundred times longer than in 2021! This means a DDoS attack can affect your company or organization from 30 minutes up to several days.
What tot do against a DDoS attack?
We have some good news and some bad news. Let’s start with the bad news: A DDoS attack cannot be prevented. This means an attack can always take place. The good news? The effect of a DDoS attack can be significantly reduced. Below are some tips to reduce the effects of a DDoS attack:
- What are crucial parts of your organization? Find out where weaknesses in your organization take place. For example: what happens with the orders and communication done via the website when said website is down?
- Are you responsible for the availability of your services or is that supplier responsibility? Check the SLA-agreements that are made with the IT-supplier.
- Does your organization already work with protection software like an Anti-DDoS solution or Firewall? Currently there are a lot of service providers that can apply you with safe software to protect yourself against the impact of DDoS attacks.
The tips above are just a few examples that showcase how you can protect your organization against DDoS attacks. There are countless other measures you can take. Take a look at our tips to protect your business. Want to know more? Contact one of the OpenSight experts.
What is ISO 9001?
Geplaatst op: 27 December 2023
We often get questions about the ISO 9001 certification. In this article we’ll explain what an ISO 9001 certification is, why it is valuable to get a certification and how to get it.
What is ISO 9001?
ISO 9001 is a globally recognized standard in the field of quality management. With this certification you as an organization show that all products and services meet all the needs, requirements, wishes and specifications of stakeholders. By complying with ISO 9001 organizations show that they work transparently and reliably.
Why get an ISO 9001 certificate?
Every organization has fixed steps and processes that are necessary for the delivery of products and services. These steps and processes are constantly monitored and optimized where necessary. A quality management system like that ensures growth and development within the organization. When getting the ISO 9001 certification your organization can proof to customers and partners that the quality management system is uphold.
What are the advantages of an ISO 9001 certification?
With an ISO 9001 certification you as an organization show that you deliver quality and continually strive towards improvement. These are the benefits of the ISO 9001 certificate:
- Increased customer satisfaction: from now on customers will get the best service and support, because the organization is constantly working on optimizing processes.
- Demonstrable quality: the ISO 9001 certification, or rather the quality of the quality management system, shows that the organization understands and controls all important processes, including up to date knowledge regarding laws and regulations.
- Saving money: by optimizing and streamlining the processes in the organization you reduce the risk of errors. Not only does this mean you’re working more efficiently, but you also save money.
How do I obtain an ISO 9001 certificate?
An ISO 9001 certificate is tested by accredited certification organizations. This is done through an audit. During this audit, the auditor tests the design and operation of the quality management system based on various steps. It’s important to comply with the demands of the ISO 9001 before getting into an audit. However, don’t make it more difficult than it has to be. Although the organization has to comply with strict requirements to obtain the ISO 9001 certification, this process has to match your working method. Take a closer look at the quality management system. Does it comply with business operations? If not, then there is work to be done! More information about what you should pay attention to during an audit can be found here.
Why OpenSight ?
For an ISO certification process to succeed, the management system must fit in well with business operations and monitor the operational impact. With over 10 years of experience, our team has helped hundreds of organizations with designing and implementing different ISO standards. We work from the perspective of human and organization. Our consultants advise in a pragmatic manner and support in the design and implementation of policies and measures. Projects will run more smoothly, and we’ll answer all your technical questions. If you choose OpenSight, you choose the guaranteed technical support and knowledge that your organization needs.
Other benefits:
- Technical consulting, implementation and maintenance; all-in-one.
- A pragmatic approach with attention to people and business.
- Flexible input allows you to set the pace yourself.
- Personal support with the technical implementation of security measures.
Check out this page for more information about our certifications.
The consequences of a cyberattack? A fatal blow for many organizations
Geplaatst op: 20 December 2023
More and more large organizations and companies are getting attention from news due to them falling victim to data breaches, ransomware or cyberattacks. The Dutch Data Protection Authority reported an explosive increase in reports of a data breach in 2021. A doubling of the previous year, to be exact. The number of ransomware attacks will also increase by 33% in 2021, according to the annual report of the Public Prosecution Service. A cyberattack has become a serious threat every organization, regardless the size, must watch out for. We see a large part of the working population (in the Netherlands) fall behind. Entrepreneurs and employees are only partially aware of the consequences of a cyberattack for their company. It’s important for organizations to learn more and take responsibility for the processing and storage of their data. CIO, Marcel Krommenhoek talks about the risks of a cyber attack.
What exactly is a cyber attack?
A cyberattack refers to destroying, changing, or gaining access to (personal) data of an organization, without the permission of the organization. For example:
- Your USB stick with (personal) information of customers on it gets stolen;
- A hacker breaks into your computer network and steals (personal) information;
- Any type of ransomware.
Hackers that break into the network of an organization and acquire sensitive data are more common than often thought. To make matters worse, according to research from Cisco, about 60% of cyberattack victims go bankrupt within 3 years after the attack. How is that possible?
”Almost all organizations depend on digital data, so it has a huge impact if this data leaks or gets damaged.” Marcel explains. “We often see that a cyberattack has a long-term impact on business operations. This can result in direct operational loss, damage claims due to non-compliance with obligations or serious reputational damage. There are also considerable recovery costs and investments involved in a cyberattack so that the weak spots in the security can be closed. The combination of these matters puts the survival of the organization at risk.”
According to Marcel it’s not solely the cyber attack that causes bankruptcy. It’s the road to recovery and the associated costs that kill these companies. In the field of cybersecurity, it’s better to be safe than sorry.
The consequences of a cyberattack
It’s evident that the consequences of a cyberattack have a major impact. Identity theft due to a cyberattack is no joke, nor are the loss of sales or reputational damage. A few things that influence the impact of a cyberattack:
- How quickly can you recover: If the organization has the procedures in order and can recover quickly from an attack, this significantly reduces the impact. A temporary (short) disruption can often be managed well.
- Special features of the organization: by way of illustration, the risks of some kind of cyber-attack of a hospital will be greater than a data breach involving a newspaper mailing list.
- Duration of the attack: Sometimes a hacker has been in for days or weeks. If this is not detected, the damage can be very targeted and even recovery options can be compromised.
Cybersecurity 2023 – What do we have to protect?
With the increasing number of cyberattacks and organizations falling victim to a cyberattack, the question is not ‘if’, but ‘when’. Especially when organizations don’t improve their IT-security. Even though cybersecurity experts are constantly warning for this growing threat, action is often lacking. why is this? Cyber and security continues to be a difficult subject for organizations
According to Marcel: “This has several causes that reinforce each other. First, we see that IT budgets are under pressure and the focus is on optimizing the primary processes. Less attention is paid to the security of the organization. On top of that, many security measures have an impact on day-to-day work, as security and efficiency are at odds. Finally, we also see a role for suppliers of security solutions. It happens all too often that only technology pushed, while security starts with people. It starts by creating awareness about the risks and consequences.You want to have a clear insight into which data is most important and you want to ensure that it is precisely that data that is best protected”,
Mind the gap – about closing the gap between cybersecurity and business
When we talk about making organizations more secure, we should mainly focus on closing the gap between IT and business. Especially in the coming years. According to Marcel, this starts with raising awareness among staff. Communication from IT and cyber experts can help with this. What many people don’t realize enough is that the main goal of these cyber experts is to keep the business functioning undisturbed. That’s why these experts are also of big importance for the business side of the organization. If you use that in your communication and make cyber security a common goal, new opportunities will present themselves!
Would you like to talk about the various options to better secure your organization? Contact one of our experts.
AI and machine learning: the future of cybersecurity
Geplaatst op: 20 December 2023
Cybercrime is becoming an increasingly important topic in the business world. However, companies are only partially aware of the consequences. With the necessary risks involved. At OpenSight, we understand better than anyone that keeping up with cyber threats can be a complex task. But ignoring the risks puts the business at risk. Avoiding risk requires a combination of technology, strong policies, and employee training. In this article, read how integrating AI can help better protect your business.
Prevent cyberattacks with AI
In the last two years over 70% of Dutch organizations have had to deal with cyberattacks. Many of these organizations rely only on standard solutions and software to protect their networks and data. Fortunately, opportunities to better protect ourselves are growing. AI and machine learning are great examples of this. There is a big difference between the traditional, conventional solutions, and AI. With traditional solutions, for example, you can only detect malware that the software already knows. New malware? That’s a problem. It is, of course, possible to update the software, but there is a downside: the software must be constantly up-to-date. If you forget this once, you’re still at risk to becoming a victim of a cyber-attack.
With AI and machine learning things are different. These self-learning algorithms keep improving and developing constantly. This allows the software to recognize malware by the way it behaves, without depending on an update. When something unnatural happens on a device, this change is immediately noticed.
Benefits of AI integration with cybersecurity
AI has several cyber security benefits. A few examples:
- Rapid Threat Detection: AI is one of the best technologies for identifying and stopping unknown threat attacks.
- Working with larger amounts of data: AI processes large amounts of data in a much shorter time frame. This makes it possible for companies to scan a lot of data within a short period of time and find anomalies in the system in no time.
- Up-to-date security: Hackers are becoming increasingly dexterous in hacking into company systems. It’s important that security is always up to date. Machine learning supports you by recognizing different types of attacks and continuously improving these processes.
- Authentication and role assignment: AI also helps you improve the authentication process. This technology uses different elements to recognize people. Think of facial recognition, fingerprint scanning and more. The benefit of this is that AI then uses the important data points to verify users’ logins.
Using AI and machine learning
As you can see, AI and machine learning make it possible to tighten companies the security processes. Continuous improvement, faster detection of threats and overall better security. Curious about the possibilities? Contact one of our experts!
Better security with Mail Spectator
Geplaatst op: 20 December 2023
Phishing Mails and domain name fraud are becoming more common. Not only has the frequency of these cyber hacks increased enormously, but hackers are also becoming more agile. As a logical response, we see that companies and organizations want to take action. But where to start? Fortunately, useful tools are available to help prevent phishing and CEO fraud. Mail Spectator is one of those tools. We’ll tell you more.
About phishing
The word phishing is somewhat similar to the word fishing. With phishing we then also mean the act of fishing for personal information and data from other people. Although we are warned daily about phishing, such as through our bank or from the government, emails from hackers seem to get more realistic. The chance that employees fall into the trap of a phishing email is therefore quite high.
What is Mail Spectator?
Mail Spectator is a tool that monitors your domain name 24/7. The goal? Preventing phishing and CEO fraud. Because Mail Spectator monitors your domain name vulnerabilities are detected early. In this way, e-mail traffic becomes reliable, and you minimize phishing and fraud.
The benefits of Mail Spectator
Did you know that your domain name can be used by others to send phishing emails? Employees and customers will then receive realistic emails under the name of your company. This can cause quite a few problems once they open the email or enter important data.
Mail Spectator monitors the use of your domain name to prevent abuse.
Because your domain name is continuously monitored with Mail Spectator, you will immediately receive an update if something isn’t right. Is someone misusing your domain name or is the domain name configured incorrectly? You will immediately receive a notification. Find out in no time if your domain name is being misused and improve overall security within the company.
Better security with Mail Spectator
A safe environment to work in is essential for employees to do their job well. It’s crucial that risks such as phishing and domain fraud are kept to a minimum. Mail Spectator can help you with this. Curious about the possibilities? Contact one of our experts!
Want to get a grip on your business? Choose Vulnerability Management
Geplaatst op: 20 December 2023
An error in a company’s software or hardware seems like small mistake. Unfortunately, The impact is a lot bigger. If there is a vulnerability in the system, it is exposed to various risks, which means that it can be exploited. With Vulnerability Management, you prevent unnecessary risks and protect both the company’s software and hardware. In this article we tell you more about the benefits and possibilities of Vulnerability Management.
Why Vulnerability Management?
With Vulnerability Management, you detect vulnerabilities in the network in a timely manner. By being there in time, a plan can be made to mitigate the vulnerability and you reduce the chances of a cyber attack. But there are other reasons why you should choose Vulnerability Management.
Why Vulnerability Management?
With Vulnerability Management, you detect vulnerabilities in the network in a timely manner. By being there in time, a plan can be made to mitigate the vulnerability and you reduce the chances of a cyber attack. But there are other reasons why you should choose Vulnerability Management.
An effective security policy
Knowledge is power. If you want to create an effective security policy, you first need to know what’s going on. If this is currently lacking, it will be impossible to effectively protect your company against cyberattacks. What risks are there for the company at the moment? How can employees work safely from home? What do we do with our own devices? Is everything patched properly? Vulnerability Management provides you with the insights and answers to the questions you need to draw up an effective security policy.
Visibility on vulnerabilities
Another advantage of Vulnerability Management is that it exposes the exact number of vulnerabilities that your company inhabits. Scanning the network and systems shows where the software contains vulnerabilities. In a clear dashboard you have a clear overview of the risks. This makes it a lot easier to take action. Such a Vulnerability Management dashboard is also useful for management, since you have a direct view of what is relevant to you within the company.
The different options for a vulnerability scan
As we said before, Vulnerability Management gives you the insights you need to tighten security. Do you want complete insight? There are several scans you need to run to achieve that. This depends on the purpose of the scan and the desired output. A proper Vulnerability Management solution has all these functionalities. Below are a few examples of the different scans.
Non-credential scan
This is, as the name implies, a scan without credential. The non-credential scan gives you an overview of the different ports, protocols, and services on a host. Then the vulnerabilities and possible misconfigurations are identified. The result? You now know how hackers view the network from the outside.
Credential scan
Scanning with credentials gives you more rights on assets/hosts. This will give you a more complete picture of the situation. Malware, for example, is not detected by the non-credential scanner, so vulnerabilities still creep into the system.
Agent based scanning
If you are looking for a complete picture of all vulnerabilities on a device, agent-based scanning is the way to go. An agent-based scan gives you real-time insight into all risks. By scanning with an agent, you also do not have to use credentials. The result? More safety and reliability.
Get started with Vulnerability Management
If you get started with Vulnerability Management, you will get a grip on your business. Just keep in mind that many vulnerabilities are exposed in the beginning and that this can be quite confronting. It’s important to remain calm and to tackle the vulnerabilities step by step. Do you want to know more about how to do that exactly? Contact one of our experts! We’re happy to help!