The document discusses essential security measures for IT systems to protect against cyber threats, emphasizing the importance of current operating systems, firewalls, antivirus, and phishing awareness. It highlights a specific incident where a security alert went unaddressed despite installing a high-cost malware detection tool. Best practices for cyber resilience include assuming compromise and planning responses accordingly.

1. Are Your IT Systems Secure
From Cyber Criminals, Viruses,
Worms and EMPLOYEES?

2. Security Essentials
• Current Operating System – Windows 7 or Above
• OS and Third Party Patches
• Firewall With Update Services
• Client Level Antivirus
• Spam Filter
• Secure Wireless
• Password Policy

3. On Saturday, Nov. 30, the hackers had set their traps

4. Six months earlier the company began installing a $1.6
million malware detection tool made by the computer
security firm FireEye (FEYE), whose customers also
include the CIA and the Pentagon.

5. FireEye spotted them.
Bangalore got an alert and
flagged the security team in
Minneapolis. And then …
Nothing happened.
For some reason, Minneapolis
didn’t react to the sirens.

6. Current Threats
Spearphishing
95% of all attacks on the
enterprise network are the
result of successful
spearphishing
-Allen Paller
Director of Research,
SANS Institute

7. Current Threats
Phishing
Nearly 1 in 5 users will
click on a link within a
phishing email
Verizon Data Breach
Investigation Report, 2014 https://phishingquiz.mcafee.com/
88% of HR and
Finance clicked on at
least one phishing
email

8. Current Threats
Social Engineering

9. Current Threats
“Nearly one in five people who found a random
USB stick in a public setting proceeded to use
the drive in ways that posed cybersecurity risks
to their personal devices and information and
potentially, that of their employer, a recent
experiment conducted on behalf of CompTIA,
the IT industry association, revealed.”
http://www.securitymagazine.com/articles/86728-study-highlights-poor-security-habits

10. Current Threats
• Viruses
• Malware
• Worms
• Trojans
• Ransomware

11. Best Practices
• Security Review
• Update Software including OS, AV..etc.
• Policy Review
• Current Generation Firewall
• Backup Backup Backup
• Security Breach Mitigation Plan

12. NO ONE IS DISCOUNTING PREVENTION. BUT
BUILDING CYBER RESILIENCY STARTS WITH
THE PREMISE THAT ATTACKERS WILL GET IN,
THAT SMART ORGANIZATIONS OPERATE
UNDER AN “ASSUMPTION OF COMPROMISE,”
AND THAT THEY PLAN THEIR RESPONSE AND
REMEDIATION CAPABILITIES ACCORDINGLY
VICTOR LIMONGELLI IS PRESIDENT AND CEO OF GUIDANCE SOFTWARE, INC. HE IS A FREQUENT
SPEAKER AT SECURITY AND LEGAL EVENTS.

13. Security Inside Network
• Training
• Security Review
• ISFW
• Training Again

14. Loren Vonlintel Lvonlintel@nex-tech.com 785-621-7006