/*! elementor – v3.14.0 – 26-06-2023 */
.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=”.svg”]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}
/*! elementor – v3.14.0 – 26-06-2023 */
.elementor-column .elementor-spacer-inner{height:var(–spacer-size)}.e-con{–container-widget-width:100%}.e-con-inner>.elementor-widget-spacer,.e-con>.elementor-widget-spacer{width:var(–container-widget-width,var(–spacer-size));–align-self:var(–container-widget-align-self,initial);–flex-shrink:0}.e-con-inner>.elementor-widget-spacer>.elementor-widget-container,.e-con-inner>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer,.e-con>.elementor-widget-spacer>.elementor-widget-container,.e-con>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer{height:100%}.e-con-inner>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer>.elementor-spacer-inner,.e-con>.elementor-widget-spacer>.elementor-widget-container>.elementor-spacer>.elementor-spacer-inner{height:var(–container-widget-height,var(–spacer-size))} /*! elementor – v3.14.0 – 26-06-2023 */
.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}
12 Essential CyberSecurity Controls
The risks associated with cybersecurity vulnerabilities is significant. Organizations without appropriate cybersecurity controls may find themselves on the receiving end of sophisticated ransomware attacks, business email compromises, supply chain disruptions, and social engineering incidents. Obtaining cyber insurance can provide peace of mind for business owners facing these types of risks.
The SSR team is committed to helping our clients navigate the cyber insurance landscape. To ensure your organization meets the latest requirements and mitigates risks, we’ve summarized 12 Essential Security Controls recommended by top Cyber Insurers:
Click on any item on the list for detailed explanations of each security control:
.elementor-toggle{text-align:left}.elementor-toggle .elementor-tab-title{font-weight:700;line-height:1;margin:0;padding:15px;border-bottom:1px solid #d5d8dc;cursor:pointer;outline:none}.elementor-toggle .elementor-tab-title .elementor-toggle-icon{display:inline-block;width:1em}.elementor-toggle .elementor-tab-title .elementor-toggle-icon svg{-webkit-margin-start:-5px;margin-inline-start:-5px;width:1em;height:1em}.elementor-toggle .elementor-tab-title .elementor-toggle-icon.elementor-toggle-icon-right{float:right;text-align:right}.elementor-toggle .elementor-tab-title .elementor-toggle-icon.elementor-toggle-icon-left{float:left;text-align:left}.elementor-toggle .elementor-tab-title .elementor-toggle-icon .elementor-toggle-icon-closed{display:block}.elementor-toggle .elementor-tab-title .elementor-toggle-icon .elementor-toggle-icon-opened{display:none}.elementor-toggle .elementor-tab-title.elementor-active{border-bottom:none}.elementor-toggle .elementor-tab-title.elementor-active .elementor-toggle-icon-closed{display:none}.elementor-toggle .elementor-tab-title.elementor-active .elementor-toggle-icon-opened{display:block}.elementor-toggle .elementor-tab-content{padding:15px;border-bottom:1px solid #d5d8dc;display:none}@media (max-width:767px){.elementor-toggle .elementor-tab-title{padding:12px}.elementor-toggle .elementor-tab-content{padding:12px 10px}}.e-con-inner>.elementor-widget-toggle,.e-con>.elementor-widget-toggle{width:var(–container-widget-width);–flex-grow:var(–container-widget-flex-grow)}
1. Enable Multifactor Authentication (MFA)
MFA enhances security by requiring both a password and a secure token, greatly reducing phishing, credential stuffing, and ransomware risks. Implement MFA for email, VPN, and critical systems.
2. Create and test an incident response plan
An incident response plan helps identify, respond to, and recover from cybersecurity incidents by outlining how to classify, triage, and escalate them to key contacts.
Pro Tip: To be effective, the plan must be regularly tested through real-world scenarios or tabletop exercises with team members.
3. Block remote access ports at the firewall
Remote Desktop access from the public internet is a common target in ransomware attacks. Using a VPN, remote access gateway, or network filtering, along with MFA, significantly reduces this risk. Simply changing Remote Desktop to a non-standard port offers no real protection, as attackers easily scan all ports. The best practice is to keep RDP behind a VPN and avoid exposing it to the internet.
Pro Tip: review firewall rules regularly to ensure they’re up to date.
4. Air gap and encrypt backups
Backups alone aren’t enough to stop attackers. Encrypt backups and store them in an air-gapped environment to prevent unauthorized access or alterations. Air-gapping ensures data remains out of reach from most attackers without physical access. However, encryption and air-gapping aren’t sufficient by themselves. Regularly test backups with spot checks and full restorations, and log metrics to assess the potential impact of a major event requiring complete restoration.
5. Use email filtering and web security
Use email filtering and web security. Protocols like DMARC, SPF, and DKIM protect against domain impersonation and man-in-the-middle attacks. They are easily verifiable and should be in place. Email security gateways block unwanted emails, reducing spam, phishing, malware, and fraud—acting like a firewall for email. Web filters block harmful and suspicious content. Educating users on these risks is the most cost-effective way to manage them.
6. Remove end-of-life (EOL) devices and software
Managing patches and vulnerabilities is a challenge for many organizations, especially with legacy systems that no longer receive updates. Attackers often target these outdated systems. For mission-critical systems that can’t be upgraded, use compensating controls to monitor for malicious behavior and enforce strict access management.
7. Implement advanced endpoint detection and response
Endpoint detection and response (EDR) solutions are crucial for preventing ransomware, credential dumping, and network reconnaissance. Using machine learning, they can block even unknown malware through behavioral analysis, stopping attackers from deploying their tools. EDR also gives security analysts detailed insights into blocked files, process activity, and user behavior, along with multiple threat mitigation options.
8. Enable logging for all systems, software, and perimeter devices
A common issue in incident response is the lack of logging and evidence. Endpoints, servers, and network devices can generate logs and send them to a centralized platform or SIEM for storage and threat analysis. However, many organizations fail to configure log storage, leading to important data being overwritten. To avoid this, a best practice is setting a retention period of at least 90 days for all security event logs, network perimeter devices, and remote access devices.
9. Conduct employee awareness training and phishing simulations
Threat actors continuously develop sophisticated phishing and fraud tactics targeting employees. Security awareness training helps employees recognize the risks of phishing and social engineering. Not all employees are tech-savvy, so providing training tools can reduce the chances of exploitation.
10. Update patch management programs
A modern patching program should effectively manage timely software updates for operating systems and commonly used applications. It should aim to reduce the mean time to patch and provide metrics on ongoing efforts. In cases of high-severity vulnerabilities, a mature program can assess risks based on average patching times, aiding stakeholders in critical decision-making.
11. Deploy password managers and adopt least-privilege access
Password managers can greatly reduce weak password usage by allowing employees to generate strong, unique passwords for each site. They often include MFA for added security and can lower support costs related to password resets.
Implementing “least-privilege access” ensures users only have access to resources necessary for their roles, reducing the risk of account compromise. Administrators should maintain a separate admin account requiring MFA for tasks beyond standard user duties.
12. Manage and secure the vendor/digital supply chain
Recent incidents, like the SolarWinds and Kaseya breaches, show how vulnerable IT management tools can be. Using outdated or unpatched software poses significant risks. Organizations should make upgrading and patching a regular practice.
Security begins at the contract stage. Strong security language in software contracts is essential, but maintaining high security intelligence regarding the supply chain is critical. IT must stay informed about vulnerabilities and be prepared to react and remediate swiftly.
Let our team of cybersecurity experts help ensure your enterprise is secure. We start with a thorough security assessment to uncover vulnerabilities. The assessment provides the following:
- High-level overview of your current IT security measures
- Comparison of your current practices against industry best practices
- Identification of potential security risks and inefficiencies
- Gap analysis outlining recommendations to improve your security practices
Ready to begin?
