Tackling the challenges of cyber security

A selection of our insights on how organisations can tackle the challenges of cyber security can be found below, or read our experts' views in the media.

Cyber security culture: the role of people in cyber defence

• People power: making your people an essential part of your cyber security strategy 
  Developing a security culture with a focus on people is an essential component of strong cyber defence.

• Trust in the age of information security 
  Organisations can reduce their exposure to employee risk, while being careful not to alienate their most vital people, by building a security culture that concentrates on building and maintaining trust. 

• More control, more risk? Why balance is everything in cyber security 
  To maximise security, your business must focus on developing an intelligent security culture that reflects real human behaviour, making security the responsibility of all employees.

• How can you improve cyber security awareness in your organisation? 
  Raising the levels of awareness and understanding of the cyber risk and embedding ‘security-aware’ values and behaviours across your organisation is the key to developing an effective security culture.

UK Government guidance: managing employee risk and the insider threat

• Managing employee risk – new guidance from PA and the Centre for the Protection of National Infrastructure (CPNI) 
  Effective employee monitoring measures will significantly improve an organisation's security and reduce potential costs. 

Cyber security strategy

• Taking an integrated approach to cyber security
  In order to protect their business assets in cyber space, organisations need to take an integrated and intelligence-led approach to cyber security that also considers the people factors.

• Practical steps to securing your business in cyberspace
  Establishing a base level of intelligent security will deflect the vast majority of cyber attacks.

• Reducing the risk to cyber security from social engineering
  By improving employee awareness and introducing simple technical measures, organisations can protect themselves against social engineering and its potential impact on business, customers and data.

• Putting human resources at the heart of cyber security
  HR Directors have a critical role to play as part of an effective cyber security strategy they need to take ownership of the security risk posed by employees; ensure security measures are both practical and ethical; and help identify employees who may present a particular risk.

• Managing people risk and the insider threat through strategic protective monitoring
  Protective monitoring can help an organisation to significantly reduce 'opportunistic crime' or counter-productive behaviour by insiders and to manage its people risk.

• Managing the threat of industrial espionage
  Espionage uses trusted insiders to steal information covertly from an organisation, leveraging routes enabled by its cyber infrastructure. There are three key steps an organisation can undertake in order to manage this risk effectively.

Industry insights:

• Energy: Managing the cyber security threat to industrial control systems in the energy sector
  Industrial control systems are exposed to cyber security threats similar to those faced by corporate networks – and this threat is increasing. Energy companies must identify and understand key security risks, and then ensure ongoing protection.

• Financial services: Unlocking the potential of IT risk management
  Financial institutions must implement IT controls that address the changing risk landscape effectively: recognising that risk frameworks and guidelines only deliver value when calibrated to a company's needs is the key.
• Financial services: Making information security a corporate-level priority for banks
  Banks must challenge their traditional approach to information security by ensuring that cybercrime is on the corporate risk management agenda at the level of credit and market risks.

• Public sector: Protecting public and private sector organisations from cyber attack - the role of government 
  To encourage businesses to take a more active approach to cyber security, governments must take action on three fronts: promote a wider understanding of the business risk; acknowledge and address the cultural aspects; and involve academia and businesses in developing a collaborative response.
  

  
  

Industry comment:

• Responding to the MS12-020 security vulnerability
  In order to protect themselves from the MS12-020 critical security vulnerability, organisations should take action to ensure both the immediate and longer term security of their IT infrastructure.

• Learning from the Sony network intrusion
  Joint planning, maintaining a focus on business objectives and bringing teams together is the most efficient way of responding to cyber attacks. 
  

  
  

PA has extensive experience of working closely with clients at the forefront of cyber security in both the public and private sectors. Our expert team combines:

• in-depth understanding of the cyber threat

• world-class capability in a range of key cyber disciplines

• deep industry knowledge.

To find out more about how PA can help your organisation tackle the challenges of cyber security, or to speak to one of our experts, please contact us now.