Security or Breach Enterprise to Decide
Enterprise Security Challenges have been an ongoing discussion in the professional world at the CIO/ CISO level, but the most important question is how and what we are doing about it? Are we well informed and prepared in fighting the APT's? How effective our security layer is to identify an attack sooner than later? Before it is too late, this paper talks about some of these aspects, real time cases and how we can equip people supporting the Data/ Security in their Organizations better. Keywords Security, Breach, CIO/CTO/CISO, Kerberos, Integrations, Mergers Acquisitions, Divestitures, supply chain. INTRODUCTION Technology A Boon or Boom? In this technology era, we talking about sending people to the moon, we talking about self driven cars and digitization. The first thing we discuss in any organization is how can we automate activities. Whether its supply chain or financial processes, whether its Open source, robotics or blockchain. It has given great advancement and effectiveness in any organization. On the one hand, it has pioneered various digital transformation on other data breaches has accelerated at an alarming rate. A tractor is designed to deliver a high tractive effort at slow speeds, but can it carry everything? In the fast forward world; we constantly need to move whether it is a merger, demerger, acquisition however what matters, in the long run, is; what we are leaving behind. For exampleWe move but personal information, the habits do not change much, so we have to be mindful when we move forward. Increased level of access, integration, mergers, divestitures presents risks and potential security compromises. We are seeing a lot of predators waiting to prey leaving an organization vulnerable to attacks. Any security breach doesn't only affect the data or data points but the entire organization reputation and inflict lasting brand damage, resulting loss in business opportunities. We need to be cognizant of how it can impact the shareholders with their top and bottom line. Today businesses rely on multiple devices, multi tenant software and servers, numerous vendors collaborate within our institution. We need to think cohesively taking into account the entire eco system while designing the security fabric architecture. Every industry is different the way it operates; we need to think and act like a predator and define the boundaries and perimeters like the way we do going into any war. According to Cybersecurity Ventures, the annual cost of cybercrime globally will rise from $3trillion in 2015 to $6 trillion by 2021. The activated hackers cell is flooding marketplace by launching various tools and services to criminals. A former consultant for the FBI cybercrime team trawled the darkest picture with the available online shopping list below. Basic malware cost is as little as $1. Figure1: Shows various list price for attack tools and services Question is what are we doing to assess and mitigate these risks? How can we prepare ourselves better? How we can embed and tailor NIST framework within our organization and what things we need to be more careful of especially during integration. Competition, espionage, theft, sabotage, and warfare traditionally carried out "in the field" have erupted online over the wire. State sponsored cyber attacks target critical infrastructure, financial systems, government agencies, political adversaries, retail and consumer databases, and the intellectual property of technology firms. These critical attack vectors include the following: advanced persistent threat; business email compromise; ransomware; social engineering in social media, insider threat, and partner compromise. Cyber attack is not limited to "Money" but tarnishing the image of the enterprise is getting quite common. The deficit of customers and stakeholders trust is the biggest harm an enterprise could ever have. Leaders of today need to step back and assess the need, vulnerabilities and prioritizes the defense strategy to overcome these challenges. Today, the way hackers are evolving and exploiting the organizations and people for money and other activities, we may expect the adverse level of threats in future, it could be worse and dynamic in nature, but the forward looking, dynamic mindset is an important factor to understand the dynamics and behaviors of such challenges. Certainly, we can rely on our partners, vendors, security team for damage control but knowing your enemy well is the best way to counter such offense. Knowing and understanding the most current threats requires an extensive research of blogs, social media feeds and other sources of information, then running the checks with internal log data. International Journal of Engineering Research Technology (IJERT) ISSN: 2278 0181 http:/www.ijert.org IJERTV7IS040428 (This work is licensed under a Creative Commons Attribution 4.0 International License. Published by www.ijert.org Vol. 7 Issue 04, April 2018