Cybersecurity strategies to prioritize now

Cybersecurity strategies to prioritise now centre on four practical priorities that organisations should act on immediately. First, prioritise essential cyber hygiene basics, such as keeping an accurate network inventory, using network segmentation, blocking unnecessary IP addresses, maintaining logging and monitoring, and deploying a VPN to restrict direct internet access.

Second, prioritise modern security standards, products, and protocols, including fingerprinting to identify bad actors and ensuring MFA is phishing-resistant while phasing out risky open authentication methods. Third, prioritise fingerprinting to identify known good and bad actors across networks, devices, and users, with examples like leveraging multiple fingerprinting solutions and recognising that threat actors can appear legitimate from familiar locations.

Fourth, prioritise collaboration and learning by sharing threat intelligence and engaging with initiatives such as ARC, FSISAC, HISAC, TISAC, and GASA to enhance detection and response. The article also notes practical steps for boundary protection, endpoint security, and proactive measures such as data loss prevention and robust email and web proxies to curb common attack vectors.