WHAT IS CYBER SECURITY??

Cybersecurity is the process of protecting systems, people and data from cyberattacks using policies, processes and technologies. Enterprise level cyber security is a key element of overall risk management strategy and specifically cyber risk management.

Introduction to Cyber Security

It is the process of ensuring protection of computers, networks, programs and data against any form of unauthorized access, modification or theft.Cybersecurity depends on three basic principles commonly referred to as the CIA Triad:

• Confidentiality: Maintains privacy of data such that only those who are supposed to have access to it get to see it.
• Integrity: Ensures that the data is accurate and protected from any form of alteration.
• Availability: Provides easy access to systems and data when they are needed.

Common Threats

• Malware: Malicious programs such as viruses and ransomware that attack computers.
• Phishing: Emails and other messages that trick one to provide passwords.
• Social engineering: Manipulation that leads to violation of cybersecurity policies and provision of keys.

Access Control Concepts

• Authentication: Establishing who you are through passwords, biometrics, or security tokens.
• Authorisation: Assigning you the proper authorization after proving who you are.
• Non-Repudiation: Providing irrefutable evidence that a particular user carried out an action or sent a message.

Security Strategies

• Defense-in-Depth: Applying different security controls so that even if some fail, there are others to back up the system.
• Least Privilege: Providing users with the bare minimum access for their tasks.

Cybersecurity Domains

• Network securityFocus: Safeguarding the data being transferred over internal networks and the Internet.Key technologies: Firewalls, virtual private networks (VPNs), and intrusion detection systems (IDS).
• Endpoint securityFocus: Safeguarding individual endpoints connected to the network.Endpoints: Laptops, smartphones, tablets, and servers
• Application SecurityFocus: Resolving security flaws in the software code both in its development stage and when released to production.Key strategy: Secure coding practices and software patching.
• Identity and Access Management (IAM)Focus: Granting the correct access to the appropriate resources to the appropriate individuals.Key technologies: Multi-Factor Authentication (MFA) and Single Sign-On (SSO).
• Data SecurityFocus: Protection of information assets against any threats or misuse.Key approaches: Encryption and tokenization.
• Cloud security: Protection of data in internet based servers.
• Governance, Risk, and Compliance (GRC)Area of Focus: Integration of security policies with organizational objectives and regulations.Governance frameworks: NIST, ISO 27001, GDPR, and HIPAA.
• Incident Response and Operations (SecOps)Area of Focus: Tracking environments for monitoring any live threats and handling attacks on networks.Key Center: Security Operations Center (SOC).

Major Cybersecurity Threats & Attacks

• Modern Malware and Ransomware
• Social Engineering
• System and Network Attacks
• Emerging Threats
• Phishing attacks
• DDoS Attacks
• SQL injection