National Small Business Week, Day 3

Standard

Cybersecurity-DetectFollowing up on yesterday’s post about National Small Business Week, Day 2, today is Day 3 and the cybersecurity theme for today is Detect.

Detect is the third pillar of the NIST Cybersecurity Framework.  Protect ecompasses the following:

 

Detection is all about understanding what is taking place on your network.  Do you know what devices are connected to your network?  Do you know when new devices enter the network?  Do you know when portable media is inserted into computers on your network?  Do you know what your staff is doing on your network?  The list goes on and on.  You can’t respond to threats if you don’t know about them.  Active, proactive monitoring of your network is critical in order to understand what activities are taking place on your network.  Once you understand what is taking place, you can detect events that are not authorized and address them.

Check out all of the linked resources at the Detect page.  There are some excellent materials and tools that you can use, for free, to help educate and protect yourself and your business.

The five pillars of the Cybersecurity Framework are 1. Identify, 2. Protect, 3. Detect, 4. Respond and 5. Recover.  As we move through National Small Business Week, I will continue to highlight one area each day.  Yesterday was Protect, today is Detect and tomorrow will be Respond.

As you review each of these elements, do an honest assessment of how well your business covers each area.  This Framework is essential to estabilshing good cybersecurity best practices in your business.  If you have cyber risk insurance, your insurance carrier may start asking you to verify what you are doing to address each of these areas.  This will have an impact on your premium for coverage as well as what cyber events your insurance will actually cover, should you ever need to make a claim.  The NIST Cybersecurity Framework is the defacto standard for maintaining a proper cybersecurity stance for your business.  Take time to educate yourself and your teams.