Five Cybersecurity Tips Amid COVID-19

Globally industry has seen a sharp rise in cyber-attacks since the Chinese government disclosed the spread of the coronavirus or COVID-19 within China and internationally. Especially, cyber-attacks focused on health-care systems using spear-phishing and ransomware, impersonation attacks combined with business email compromise (BEC) targeting financial systems, supply-chain cyber-attacks focused on re-directed manufacturing operations outside of China, and distributed denial of service (DDoS) cyber-attacks on the energy, hospitality, and travel industries.

With the spread of COVID-19, increased demands for information technology (IT) support services are occurring across nearly all industries, as worldwide employees, students, university faculty, and others are being asked or required to work or study remotely from their homes to reduce the spread of the virus. As a result, nation-state cyber-attack groups and criminal cyber-attack groups are taking maximum advantage to target cyber vulnerabilities in select industries, especially those most impacted by the current crisis.

Realizing that 40% or more of cyber vulnerabilities are directly linked to employee behavior, per Gartner’s latest studies, it is vital that organizations focus more on their employees via cybersecurity awareness, education, training, and use of simulations to create a stronger human firewall to protect their vital digital assets. After all, according to IBM Security’s latest findings, the average cost of a cyber data breach is now $8.2M.

Cybersecurity Top Five Tips

To reduce both the probability of a cyber-attack or significant data breach and mitigate the negative financial and reputational impacts, we offer the following cybersecurity recommendations which are clearly applicable to all industries:

1. Create an organizational culture of cybersecurity – Ensure the C-Suite consistently promotes and supports all employees practicing effective cybersecurity policies, processes, and procedures via a comprehensive cybersecurity awareness, education, and training program including spear-phishing campaigns and cyber data breach table-top exercises.
2. Implement advanced cyber diagnostic assessments, on a regular basis, including:
   – Email Cyber-Attack Assessments
   – Network & Endpoint Cyber-Attack Assessments
   – Vulnerability Scanning Assessments
   – Penetration Testing
   – Spear-Phishing Campaigns
3. Establish a Rapid Cyber-Attack Incident Response Plan – Develop and periodically test an enterprise-wide well-coordinated information system incident response plan to quickly identify, contain, eradicate, and recover from cyber-attacks.
4. Conduct 24 x 7 x 365 Monitoring, Detection, & Response (MDR) – It is essential to continually monitor, detect, and respond to all cyber incidents including: email system, network, software applications, and all information system endpoints using advanced security information event management (SIEM) software, data visualization tools, automation, and artificial intelligence (AI) capabilities.
5. Ensure information system resilience – Implement and periodically test an enterprise-wide business continuity plan (BCP) and disaster recovery plan (DRP).

Contact us for more information on how you can effectively implement these tips.

Related Posts

Agricultural Producers May Qualify for Assistance from Coronavirus Food Assistance Program

The Coronavirus Aid, Relief and Economic Security (“CARES”) Act, enacted March 27, 2020, includes the Coronavirus Food Assistance Program (“CFAP”), a $16 billion agricultural assistance program for agricultural producers. It is designed to help offset ...

June 4, 2020 read more...

The Impact of COVID-19 on Accounting Operations

The COVID-19 outbreak will have a direct and lasting impact on organizations of all sizes. While the full effect of the pandemic is yet to be seen, companies of all sizes are contending with an ...

September 2, 2020 read more...

When 15-Year Depreciation For QIP Might Be Better Than 100% Bonus Depreciation

Earlier this year, Congress finally passed legislation that corrects a drafting error related to real estate qualified improvement property (QIP). The correction is part of the Coronavirus Aid, Relief, and Economic Security (CARES) Act. The ...

January 13, 2021 read more...

COVID-19 Vaccination Tax Credit for Small Businesses

The American Rescue Plan Act of 2021 (ARP) provides for refundable tax credits that are meant to reimburse employers for providing paid sick and family leave to their employees due to COVID-19, which includes leave ...

April 23, 2021 read more...