Safer Internet Day: Fortinet's mantra is to adopt a layered approach to Make The Internet Safer

While cybercrime continues to escalate, many of today’s most damaging security threats are not the result of the traditional perception of malicious outsiders breaching a network to deliver malware. The real risk which a growing number of organizations are concerned about is the security risks resulting from users who have access to sensitive data and systems.

Automated cybersecurity solutions provider, Fortinet, on Safer Internet Day, reminded how important it has become to Make The Internet Safer as our society relies more than ever on the availability of digital infrastructure. On Safer Internet Day, Fortinet says it is uniquely positioned to help by extending their ability to educate customers, partners, students, users and global audiences at all levels of experience with tips that will go a long way in making our digital world safer and secure.

Rajesh Maurya, Regional Vice President, India & SAARC, Fortinet, said, "Cybersecurity remains a primary concern for all organizations, and cybersecurity awareness needs to be part of any successful strategy to keep networks and data safe. Safer Internet Day is a global initiative to build an industry awareness campaign that can change the overall user culture of an organization by creating a Cyber-Aware Workforce. Anyone and everyone can play a role to spread the message of Safer Internet Practices to make the cyber world a safer and better place for all.” 

Maurya says that concerns about insider threats aren’t just a fire drill. Over two-thirds of organizations believe that insider attacks have become more prevalent over the past year, with nearly half of companies reporting having experienced between one and five critical cyber incidents caused by an insider in the past twelve months. The reasons mainly are a lack of employee awareness and training.

He says organizations should implement a layered approach to security across people, processes, and technology to future-proof and manage these risks:

Train People – The vast majority of attacks still happen because someone clicks on a malicious link. Employees need to be continually educated on creating strong passwords, how to identify malicious URLs and email sources, and to not open or click on unfamiliar or unexpected email messages, links, or attachments. This should then be augmented with access management policies, including a zero-trust policy, and intent-based segmentation so in the event of an incident, an attack is limited to a specific segment of the network.

Implement Processes – Incident response plans need to include regular backups that are stored off-network, regular testing of those backups, and system restoration drills to ensure everyone knows their role so systems can be restored as quickly as possible.

IT teams must always know what assets are online, where those assets are, and then be able to prioritize their access to and consumption of resources based on which are most business-critical.

Deploy Technology – Security tools need to be chosen based on their ability to be integrated together and cross-automated so they can gather, share, correlate, and consume threat intelligence across the entire distributed network in real-time.

There is no magic pill to make the Internet Safer. It requires constant user education and awareness creation. Campaigns can be focused specifically on a training initiative such as cybersecurity awareness or could be larger campaigns that are well aligned with your learning objectives. They can be internal campaigns or external campaigns that typically provide a significant number of resources and support. An industry awareness like Safer Internet Day can be a great vehicle to launch or expand a cybersecurity awareness campaign.