Take some time and see how the threat landscape is to day.

We have listed some selected videos below which describes what kind of challenges
which you can meet in modern cyberspace. This is some examples of attacks that eCiceron
actively is searching for, investigates in depth and constantly takes pro-active
actions to prevent against. In case of a security breach eCiceron analyze
the scope to see what systems have been breached and for how long.

Extended interview with former CIA director Michael Hayden

Social engineering and ransomware

Social engineering with exploit attack

Internet Hackers in 2017 Documentary

Cybercriminals Sniff Out Vulnerable Firms

Equifax Data Breach Happened

The IT-threat landscape changes very quickly and information is on daily basis when it comes to known security flaws in modern systems. Keeping up with the threats and their counter measures is a massive work - here we have put our focus, hearts and minds - and that's why it's so cost effective to outsource information security and cyber resilience to us.

Key personnel in cyber defense:

• IT – CSO, CTO
• Business – CEO, CFO
• Marketing - CMO
• Legal – CLO

IT – is responsible for preventing, detecting and mitigating the threat / breach
Business – Puts resources where they are needed and evaluate business impact, what to prioritize in event of breach.
Marketing – Take immediate actions to answer any medial questions. Negative publicity can take many years to recover from.
Legal – Protecting intellectual property and immaterial rights, supporting in how to approach and proceed in security breach. GDPR penalties.

Questions:

• What do you say to customers and partners about your information security, can they trust you with their confidential data?
• What do you use today to detect cyber threats that have breached or are attempting to breach your organization, could the attacker hide in your network and extract information for a long period of time without being caught?
• How do you secure your cloud infrastructure?
• How large is your security team?
• How important is Security Compliance to you and your team?
• Have you considered securing critical business assets together with the requirements in GDPR?

Some of the possibilities with EMS:

• Scalable and adaptable, the service grows with your business
• Monitor your cloud, hybrid cloud, and on-premises infrastructure
• We keep you aware with continuous threat intelligence to detect and protect from latest threats as they emerge and change
• Deploys quickly, easily, and with minimal effort
• Reduces TCO over traditional security solutions
• Vulnerability analysis at a scheduled basis to prevent open "doors and broken windows" in your network.

Information Security Audit

• Identify your valuable assets, digital and physically
• Classify and do risk analysis
• Put your resources where they are best utilized
• Good balance between security and budget

Step 1: Implement a Security Information and Event Management (SIEM) tool with log management capabilities that adhere to compliance requirements.

Article 30 of GDPR states that each controller, and where applicable, the controller’s representative, shall maintain a record of processing activities under its responsibility.

Ask yourself:

• Do you have a way to centralize, analyze, and store log data from all your environments?
• Are you alerted in real time to any suspicious or anomalous activity?
• Do you have a way to securely store raw log data and to ensure its integrity?

Step 3: Undertake vulnerability scanning to identify where weaknesses exist that could be exploited.

When a vulnerability is discovered, ask yourself:

• How many personal records could be exposed?
• Have any intrusions or exploits been attempted on the vulnerable asset?
• How is the vulnerability being exploited by attackers in the wild?

Step 5: Regularly test to gain assurance that security controls are working as designed.

Article 32 of GDPR covers security of personal data processing. Among the examples it provides, it asks for a process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing.

Ask yourself:

• What level of confidence do you have in your security tools?
• If a tool or system failed, would you be alerted automatically?
• Are all security tools being used as intended?

Step 7: Monitor network and user behavior to identify and investigate security incidents rapidly.

GDPR is focused on ensuring that citizen data is gathered and used appropriately for the purposes it was stated. Therefore, it is important to focus not just on external threats or malware, but also to detect whether users are accessing data appropriately.

Ask yourself:

• Do you know what “normal” traffic looks like on your network?
• Would you be able to detect if a legitimate user is extracting customer data?
• Would a spike or drop in traffic raise alarms?

Step 9: Have a communication plan in place to notify relevant parties.

In the event of a breach, your organization must report to the regulatory body within 72 hours of being aware of the breach. For high-risk events, the controller must notify data subjects without undue delay (Article 33).

Ask yourself:

• Can I identify whether systems in scope of GDPR are affected in a breach?
• Do I have the contact details of the regulatory body that I need to notify?
• If need be, do I have a reliable mechanism to contact affected customers?

Step 2: Create an inventory of all critical assets that store or process sensitive data to allow for more stringent controls to be applied.

The GDPR is expansive and covers all IT systems, network, and devices, including mobile devices. Therefore, it is essential that you take stock of all assets across your infrastructure and establish where personal data is held.

Ask yourself:

• What assets are connected to my environment at any given time?
• Do those assets process or store any personal data?
• What ports and protocols are used when transmitting or accessing personal information?

Step 4: Conduct risk assessments and apply threat models relevant to your business.

Article 35 of GDPR requires organizations to conduct a data protection impact assessment (DPIA) or similar. Whereas Article 32 of the regulation requires organizations to “implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.”

Ask yourself:

• In the event of a data breach, can I demonstrate that appropriate security controls were in place?
• Do I know what threats my organization faces and the likelihood of them materializing?
• Am I aware of which systems and businesses units are high risk?

Step 6: Put in place threat detection controls to reliably inform you in a timely manner when a breach has occurred.

GDPR requires organizations to report to the regulatory body within 72 hours of being aware of the breach. For high-risk events, the controller must notify data subjects without undue delay (Article 33).

Ask yourself:

• Will you be able to identify and respond to a breach as soon as it occurs?
• Are you aware of the types of attacks that your company is subjected to?
• Are employees aware of how to report a breach?

Step 8:Have a documented and practiced incident response plan.

To comply with GDPR regulations, organizations should have a plan in place to detect and respond to a potential data breach to minimize its impact on EU citizens. In the case of an attack or intrusion, a streamlined incident response process can help you respond quickly and effectively to limit the scope of the exposure.

Ask yourself:

• Are all relevant parties informed and aware of what to do in the event of an incident?
• Is the incident response plan practiced to ensure it works under real-world scenarios?
• Is documentation complete and up to date?