There was a recent article in the Wall Street Journal in which the top cyber cop Shawn Henry, spoke how we are loosing the battle with the hackers. At times the hackers can keep up us all night worrying about our networks, employee actions whether intentional or not, we need to remain vigilant and on the offensive to prevent attacks.
Government regulations are not going to control hackers in fact they probably will make companies less secure. Vigilance on the part of organizations will help eliminate risks. Sr. Management needs to step up and get a better understanding of their exposure and put a plan in place to protect the data.
First:Performing a risk assessment is a great first step
Second: Poking at the infrastructure to find the holes
Third: Create a remediation road map
Fourth: Get your employees on board with awareness training and last, by no means least – back to vigilance testing and re-testing.