In November of last year, Professional Security Magazine Online ran an article entitled, “Cyber attack probability”. It said this, in part:
Ransomware is so advanced we’ve reached a point now where any company can be hacked. There are 4,000 confirmed ransomware attacks in the US every day – and the real number is considerably higher as most people do not report an attack unless they have to.
The probability of a business suffering a cyberattack can vary greatly, of course, depending on numerous factors such as the size of the business, the industry it operates in, its cybersecurity measures, emerging threats, and the current proficiency of the bad actors who make their livings in the hacking industry. Statistically, however, cyberattacks become increasingly common and likely as our reliance on digital systems grows.
What Can You Do?
There’s no sure bet when it comes to probabilities. But there are things you can do to minimize your risk by assessing it thoroughly. Here are several of the factors you should assess in trying to determine the probability of a cyberattack:
- Threat landscape: Make a determined effort to understand the types of cyber threats prevalent in your industry and your IT network environment.
- Vulnerabilities: Identify weaknesses in systems, networks, and processes in your environment that could be exploited by attackers.
- Asset value: Take detailed stock of your assets and their value, including (but by no means limited to) the data, systems, and intellectual property that could constitute targets.
- Attack surface: Thoroughly evaluate the potential entry points or weak spots through which attackers could gain access — including your people, your IT policies and procedures, and the extent to which your people have been trained in what to look for and how to respond.
- Historical data: Analyze any past incidents for patterns and trends to gauge the likelihood of future attacks.
- If you’re unsure of any of the elements in 1 through 5, call us.
Even with sophisticated security measures in place, it’s difficult to eliminate the risk of cyberattacks entirely. So, the preemptive shot is the best shot. Or as the old axiom says, “An ounce of prevention is worth a pound of cure.”
We’re Rhodian Group. We’re in the business of managed IT and cybersecurity. Please let us know how we can help you be protected from cyberthreats.
