Talk by Bert Heitink at NoNameCon 2019. https://nonamecon.org https://cfp.nonamecon.org/nnc2019/talk/DXN7DM/ There's no such thing as 100% security, but this talk will demonstrate 10 main topics what needs attention to reduce the risk of being hacked. Our current digital era creates a lot of possibilities, also for Ukraine! But how to deal with the threats on business and national level? 10 pragmatic steps you cannot ignore and are indisputable. Some are easy to implement, even tomorrow.

1. 10
Major steps
of
Cybersecurity
Before you
start with
Security Monitoring

4. 10

5. Network
Security
Access
password, MFA, Token,
Firewalls
Whitelisting/Blacklisting/
Investigating
IPS/IDS/HIDS
Known patterns/Signatures
Honeypots/Decoys
Early warning

6. 9

7. Malware Protection
Malware
Protection
Relevant Policy
Awareness
Protection Tools
Behavior Analysis

8. 8

9. TRAIN!
Education &
Awareness

10. 7

11. MONITORING
Dashboards
Alerts
Behavior Analysis

12. 6

13. INCIDENT
MANAGEMENT

14. 5

15. INVENTORY
What is in the network
Maintained
Architecure Design

16. 4

17. MOBILE
WORKING
Access
Policy management
Awareness

18. 3

19. PRIVILEGES Users
Suppliers
Agreements
Privacy

20. 2

21. SOCIAL MEDIA
What to share
What to take care of

22. 1

23. Risk
Appetite
Acceptable loss
Financial consequences
Business Continuity

24. Questions?

25. Cybersecurity
Security Monitori
Endpoint protect
OT/PCDBert
Heitink
1999 Started 1ste
Company
2004 Sincerus
2010 Cybermonitor
2018 Alertteam
Bert.heitink@alertteam.nl