Cyber security is the practice of protecting any data or electronic devices from malicious attacks. There are a range of different types of security within this:
Network security: the practice of securing a network.
Application security: making devices and software threat-free.
Information security: protects the integrity and privacy of data both in storage and in transit.
Operations security: decisions around the set-up of cyber security within an organisation.
Disaster recovery: response to a cyber security incident.
The threat of cyber security has grown rapidly over the past few years and when it comes to understanding where your business should be in terms of cyber protection, it’s important to note that having antivirus software installed on your device is no longer going to cut it. Garith takes us through the ‘layered approach’ to cyber security by comparing it to the safety features of a South African home – something we can all relate to ;)
A good place to start is understanding the threat – in cyber security lingo, we call these ‘threat actors’. Garith describes what these threat actors are and what their motivations may be.
Nation state
Cybercriminals
Hacktivists
Terrorist groups
Thrill-seekers
Insider threats
With all of this being said, you may still be wondering why cyber security is so important for my small business. The sad truth of it is, not only are small business targeted the most by threat actors, South African businesses in particular, are prime targets. To get you started, we’ve listed 6 personal cyber security tips that can start you on your journey to online safety:
Use strong passwords
Use a VPN when necessary
Think before you click
Update your network router
Always update your devices
Use two-factor authentication
Understand the difference between compliance and security
Make data security everyone’s responsibility
Know your enemy
Account for the roles of you cloud vendors and ISPs
Have a plan for if you are breached
Unfortunately, in the case a small business in South Africa, dealing with a cyber-attack is a case of when, not if. To get more informed, watch the full masterclass below.