This document discusses cyber security threats and provides recommendations for protecting against them. It notes the increasing prevalence of ransomware attacks, data breaches, and denial of service attacks. The document recommends taking a holistic, layered approach to security involving firewalls, anti-malware software, patch management, and user training. It also advises organizations to assess their risks, define appropriate controls, and regularly review their security practices. Specific threats like phishing, ransomware, and risks from email and mobile devices are also addressed. The document emphasizes the importance of documentation and having recovery plans to address security incidents.

1. Cyber-Security Overview
Mark Lomas
Probrand

2. How important?
How big is the threat?
What are my risks and
exposure areas?
What kind of
investment do I need to
make?
It won’t happen to me! I have anti-virus, so I’m
covered!

3. Incidents
• Global Ransomware Attacks
• High Profile Data Breaches (Talk Talk,
Yahoo etc)
• Denial of Service Attacks (large social
networks and online services taken
down)
• Email based social engineering
(Phishing etc).
• Much more!

4. Normal…
• No news is not good news
• Attacks go on all the time
• Attackers will go after everyone
• Many attacks are automated and
opportunistic
• ‘Invasion’ of a network can sometimes go
unnoticed for long periods

5. Risk Areas
• Internet connection
• PCs & Devices
• Operating System & Software
• Data & Email
• Network / Wireless
• People
• Policy
• Passwords
• Device Access
• Data storage
• Data Sharing….

6. Holistic Approach
Layered approach
• Firewall
• Anti-Malware
• Patch Management
• ‘Locked down’ configuration
• User Training

7. Holistic Approach
Layered approach
• Firewall
• Anti-Malware
• Patch Management
• ‘Locked down’ configuration
• User Training
Asses
• Risk Asses your IT
• Who, What, When, Where, Why?
• Define Appropriate controls
• Design the right protection
• Regularly review
• DOCUMENT!

8. Email Security

9. Email Security

10. Email Security

11. Ransomware
“We can not say it loud and often enough,
ransomware has become the black plague of
the internet, spread by highly sophisticated
exploit kits and countless spam campaigns.”
Andrea Allievi
Holger Unterbrink
Cisco Talos

12. Ransomware

13. Ransomware

14. Ransomware

15. Ransomware

16. Ransomware

17. Ransomware
This is real crime – criminals are
making off with our money!

18. Mobile Security

19. Enterprise Mobility Management (EMM)

20. Unified Endpoint Management (UEM)

21. Final Thought

22. Final Thoughts
Take action to protect yourself
Cover the basics – CyberEssentials
Just like BCDR, have a ‘Security Recovery’ plan.
Technology and Training together.
Security tip…. Windows 10!

23. Report it!

24. Thank you!