In order to create an acceptable baseline security level for businesses, Technicalities closely aligns our security strategy with the Australian Cyber Security Centre’s ‘Essential Eight’ model.
While no single mitigation strategy is guaranteed to prevent cyber security incidents, organisations are recommended to implement eight essential mitigation strategies as a baseline. This baseline, known as the Essential Eight, makes it much harder for adversaries to compromise systems.
What is it?
Application Control works by creating a list of applications approved for use in your business. Anything that tries to run that is not on the approved list is blocked.
Why is it important?
All non-approved applications, including malicious code, malware, etc that attackers try to install on your computers are prevented from executing.
What is it?
Patching involves ensuring your applications are kept up to date with the latest versions and security updates.
Why is it important?
Security vulnerabilities in applications can be used as an entry point for cybercriminals to execute malicious code, such as financial malware, on systems.
What is it?
Macros are used in some Microsoft Office applications such as Word or Excel to automate routine tasks. The use of macros in your business should be assessed, and depending on business requirements, be secured by policies governing their use.
Why is it important?
Macros can be used by adversaries to deliver and execute malicious code such as the download of malware.
What is it?
Web browsers and certain applications can contain unsecure or unused features, which have become well known attack vectors for cybercriminals. Hardening involves configuring web browsers and applications to block or disable these unsecure and unused services.
Why is it important?
Unsecure and unused features in applications are often used to deliver and execute malicious code on systems.
What is it?
Web browsers and certain applications can contain unsecure or unused features, which have become well known attack vectors for cybercriminals. Hardening involves configuring web browsers and applications to block or disable these unsecure and unused services.
Why is it important?
Unsecure and unused features in applications are often used to deliver and execute malicious code on systems.
What is it?
Similar to patching of applications, it’s important to ensure your operating systems are kept up to date with the latest security patches.
Why is it important?
Security vulnerabilities in operating systems can be used as an entry point for cyber criminals to execute malicious code, such as ransomware, on systems.
What is it?
Multifactor authentication protects your applications by using a second source of validation, like a phone or token, to verify user identity before granting access.
Why is it important?
Stronger user authentication makes it harder for adversaries to access sensitive information and systems.
What is it?
Regularly backup all data, software and configuration settings, and store them securely offsite or disconnected from the network.
Why is it important?
To ensure information can be accessed following a cyber security incident (e.g. a ransomware incident).
