Economy Opinion Security Software

A better way to prioritise vulnerability management

 

 

Digital transformation offers enormous benefits, but equally increases the security threats faced. Continuous Threat Exposure Management, first coined by Gartner, is one of the most effective methods to combat these, says Patrick Evans, CEO at SLVA CyberSecurity

 

The past few years have witnessed a significant increase in digitisation across businesses and industries, driven largely by the changes wrought by the pandemic. Companies today are far more digitally interconnected than they were prior to 2020, as evidenced by the massive increase in remote working, as just one example.

 

While this has helped businesses gain new efficiencies and increase productivity, it has also opened these organisations up to new avenues of attack, as remote employees open up new potential vectors for cyber-criminals to exploit.

 

With hundreds of thousands of software vulnerabilities to manage in this digitally transforming world, it is simply impossible to protect a business from them all. In the past, remediation priority was often tied to Common Vulnerability Scoring System (CVSS) scores, which don’t consider what’s most important for your specific organisation, attack feasibility, active threats, and other aspects of security programs.

 

Now, research firm Forrester also suggests that relying solely on CVSS scores to prioritise remediations, is flawed because it is not only misaligned with the organisation’s strategic objectives, it also puts too much emphasis on potential, not actual, threats and inflates vulnerability severity.

 

The Forrester remediation prioritisation triad includes three primary elements you should consider when assessing vulnerability risk: threat likelihood, asset importance, and strength and effectiveness of compensating controls. Assessing each element improves the accuracy of assessing vulnerability risks and provides greater assurance that remediations are properly prioritised and not determined solely on CVSS scores.

 

Gartner recognised the need for a better approach, with the company’s Top 10 Security Projects for 2020-2021 report suggesting a risk-based vulnerability management approach. The best method of implementing such an approach is Continuous Threat Exposure Management (CTEM), as first coined by Gartner to describe a method that involves consistently exposing a company’s technologies – from networks and systems through to assets – to simulated attacks.

 

By continuously exposing the business assets to such attacks, CTEM is able to help IT managers identify vulnerabilities and weaknesses, enabling them to improve the enterprise’s overall security posture through the identification of security challenges, as well as the ability to act to address these – before the genuine criminals discover these weaknesses.

 

CTEM is even more critical when one understands that the sheer number of potential attack vectors and exploits means most organisations will likely only be in a position to remediate around 15% of their active vulnerability count.

 

Therefore, what is needed is a solution that allows security teams to obtain a view of all their current approaches, and help them to identify where the top 15% of these vulnerabilities lie. With this information in hand, businesses can prioritise these specific threats. And of course, when utilising a CTEM approach, this data is updated on a continuous and evolving basis.

 

Naturally, context is important. After all, while all businesses have vulnerabilities, their individual level of risk also depends on non-technological factors, like their specific industry vertical and even their geographical location. It is the understanding of such factors, within context, that is where the real threat intelligence lies.

 

With the right CTEM tool, IT managers are able to view a combination of external threat context, asset criticality, internal compensatory control and patch intelligence. Access to this data will enable them to proactively reduce their attack surface before it gets exploited.

 

A leading CTEM offering should be able to: show severe risks that might affect the organisation’s most critical assets and which require immediate patching; identify moderate threats to critical assets; indicate high risks to non-critical assets; and moderate risks to non-critical assets.

 

Ultimately, when looking to implement any kind of Vulnerability Prioritisation Technology (VPT) or Risk-Based Vulnerability Management (RBVM) solution, you should evaluate those vendor platforms that take telemetry data from other existing solutions such as vulnerability scanning data from Nessus, Qualys or Rapid 7.

 

After all, the missing component is the real-world threat intelligence around what active threat actor groups are doing now, or in the near future, and whether they are targeting your industry, or your geographic location, or both.

 

By offering a lens through which all these telemetry feeds can be correlated with your own patch intelligence – such as what has been patched and what hasn’t – it can provide your business with a risk-based view that bears no relation to the CVSS score, but rather considers the real world in which you operate.

 

A solution like this should be able to simulate the breach attack and test the efficacy of your compensatory controls.  In addition, this complete vulnerability management lifecycle approach will have the value of reducing your mean time to exposure [MTTE], an effective KPI for pre-emptive cybersecurity management.

 

In today’s digitally transforming world, ‘invulnerable’ is not a word any organisation can use to describe its security posture. While it used to be true that no single vendor provided it all, this is no longer the case. A good example of a vendor’s platform that delivers on the Forrester remediation prioritisation triad is Hive Pro’s Threat Exposure Management (TEM) solution, the value thereof can be quickly and effectively validated by submitting a dump of your organization’s vulnerability scan data as a proof of concept. You will be surprised at the vulnerability intelligence you receive back – it is eye-opening!

 

Faced with such a rapidly evolving threat landscape, it’s virtually impossible to address every risk. The best any IT manager can aim for is ‘well prepared’ – and utilising CTEM is currently the most effective means of achieving this status.

Leave a Comment

Your email address will not be published.

You may also like

Business Security Society Software

Kaspersky presents industrial cybersecurity review and predictions for 2024

post-image

At the 9th annual Cyber Security Weekend – META conference held recently in Kuala Lumpur, Malaysia, Kaspersky (www.Kaspersky.co.za) presented an industrial cybersecurity review for the countries in the region and outlined the key cybersecurity challenges for industrial enterprises in the year ahead.

 

According to Kaspersky Security Network (KSN) statistics, in the second half of 2023, 32.6% of ICS computers globally had been attacked with malware. In the Middle East, Turkiye, and Africa (META) region the figure is 36.5% for Turkiye, 36.8% for Africa (27.5% in South Africa, 34.55% in Kenya, 28.8% in Nigeria, 33.17% in Ghana), and 33.5% for the Middle East region. There is a slight decrease in this figure in the region compared to 2022 which can be the result of industrial organisations paying more attention to cybersecurity.

African countries are undergoing rapid digitalisation and integration into the world’s economy, while at the same time…

Read More
Business Culture Economy International Tourism Travels Trends

Radisson Hotel Group targets 50% portfolio expansion in West and Central Africa by 2030

post-image

Radisson Hotel Group (https://www.RadissonHotels.com) is targeting a 50% expansion of its West and Central African portfolio, consisting of 29 hotels and over 5,000 rooms in operation and under development, building on the success of its expansion strategy in 2023. Within the past 12 months, the Group signed five new hotels, adding over 1,000 rooms to the region’s portfolio.

 

These hotel signings included new market entries into The Gambia with Radisson Blu Beach Resort & Spa, Banjul and Radisson Hotel Benin City in Nigeria. In addition to the Radisson hotel in Benin City, the signing of Radisson Collection Hotel & Conference Center, Abuja; Radisson Blu Hotel, Abuja CBD and Radisson RED Lagos VI further strengthened the Group’s position as the market leaders in Nigeria, doubling the Group’s development pipeline in a year and expanding the portfolio in Nigeria to 12 hotels and over 1700 rooms.

Business Gadgets Technology Technology Trends Telecoms

MainOne Lands 2Africa Submarine Cable in Qua Iboe, Akwa Ibom State, boosting Broadband Connectivity in South-South Nigeria

post-image

MainOne (www.MainOne.net), an Equinix Company, is delighted to announce its pivotal role in the historic landing in Akwa Ibom State of the first and only submarine cable system in Nigeria outside of Lagos. This collaboration marks a significant milestone in enhancing broadband connectivity and driving economic development in the South-South, South-East and North-Central regions of Nigeria.

 

MainOne is dedicated to improving internet capacity and driving various aspects of development

Spanning 45,000km in length, 2Africa will be one of the world’s largest subsea cable projects and will interconnect Europe, Asia, and Africa, with a design capacity of up to 180Tbps. The significance of 2Africa lies in its capacity to address critical internet needs and enhance reliability across vast expanses of Africa. Furthermore, 2Africa serves as a catalyst for the advancement of 4G, 5G and fixed broadband accessibility, extending its impact to billions of people. Akwa…

Read More
Business Security Society Software

Don’t gamble with your cybersecurity

post-image

 

Protect your online gaming and gambling experience

 

The recent wave of cyberattacks targeting the global casino and hospitality industries has raised alarm bells. Carey van Vlaanderen, CEO of ESET South Africa, says smaller chains, online gaming sites and their customers are equally susceptible. Fortunately, there are steps individuals can take to reduce the risk of their personal details being compromised.

 

Sophisticated cyberattacks, like the one reported by MGM Resorts in the United States, in which digital room keys stopped working and manual payouts were required for slot machines, are a stark reminder that cybercriminals are organised and highly skilled. However, it’s not only major international brands that have been compromised. Smaller entities have faced security breaches too. Another case in 2023 involved a ransomware attack on a small US-based casino chain. According to reports, hackers spent four months exploring systems after breaching the company network, via a targeted…

Read More
Business Culture News

SENATE COMMENDS NASENI ON ACCELERATED TECHNOLOGY TRANSFER

post-image

 

The Senate Committee on National Agency for Science and Engineering Infrastructure (NASENI) has commended the Agency for championing local content development of Solar-Powered smart irrigation, tricycles, electric motorbikes and others with accelerated technology transfer.

The Chairman, Senate Committee on NASENI Senator Ezenwa Francis Onyewuchi who led other members of the Committee on oversight function visit to NASENI Headquarters, Abuja on Monday February 26, 2024, expressed satisfaction, while being conducted by the Executive Vice Chairman/CEO of NASENI, Mr. Khalil Suleiman Halilu round some of the NASENI products and facilities.

Other products inspected include animal feed processing machines and NASENI transformers, electric motorcycles and tricycles as well as the NASENI home and irrigation solar systems.

According to Senator Onyewuchi, “The committee is quite pleased with the level of progress and we want to assure NASENI of the support of the National Assembly to make sure that agency drives effectively the vision of the…

Read More
Business News

John Nwachukwu Leads ZORACOM’s Showcase of Nigerian Cybersecurity Expertise at MWC2024

post-image

ZORACOM, a leading organization in Nigeria’s cybersecurity and threat mitigation sector, proudly announces its representation at MWC2024, the continent’s premier technology event held in Barcelona, Spain. Headed by John Nwachukwu, the company’s main executive, ZORACOM’s expert team participated in this significant gathering to showcase its commitment to advancing cybersecurity solutions.

As part of ZORACOM’s dedication to continuous growth and collaboration in the technology sector, the company leveraged its presence at MWC2024 to engage with global technology leaders and forge strategic partnerships in the cybersecurity domain. This participation aligns with ZORACOM’s mission to deliver world-class solutions to its clients in Nigeria by staying abreast of the latest technological advancements.

Commenting on the event, John Nwachukwu stated, “We are proud to be among the few Nigerian tech firms represented at this prestigious event in Europe. ZORACOM is dedicated to reinventing itself and…

Read More
Business Economy

NITDA Director General Commends Ready To Lead Africa’s Innovative Technology Platform

post-image

 

The National Information Technology Development Agency (NITDA) applauds the groundbreaking initiative of Ready To Lead Africa as they officially launch the “Follow the Promises” Web and Mobile App Technology platform. The event took place at the prestigious Transcorp Hilton Hotel in Abuja, where NITDA’s Director General, Kashifu Inuwa Abdullahi, was represented by Oladejo Olawunmi, the Director of the IT Infrastructure Solutions Department.

The “Follow the Promises” Web and Mobile App Technology platform stands out as a unique project designed to advance accountability in governance, encourage active participation in socio-economic development, and enhance transparency in public leadership. The platform aligns with NITDA’s commitment to fostering technological innovations that contribute to the overall development of the nation.

Ready To Lead Africa has successfully crafted a powerful tool that not only empowers citizens but also holds leaders accountable for their promises. This technological advancement exemplifies the synergy between the public and private sectors in…

Read More
Business Economy Events Society Tourism Travels

Direct Connectivity to London from Air Peace: Engaging Session with Travel Agents and Tour Brokers

post-image

Air Peace, Nigeria’s leading airline, is thrilled to announce the commencement of direct connectivity to London, scheduled for March 30, 2024. In preparation for this exciting milestone, Air Peace hosted an engagement session today with esteemed travel agents and tour brokers to discuss the new route and provide updates on key developments.

The session proved to be highly interactive and productive, with Air Peace representatives sharing detailed plans and receiving valuable feedback from the attending travel agents. The overwhelming attendance demonstrated the strong support and enthusiasm of the travel industry for this new service.

“We are delighted to have had the opportunity to engage with our valued travel agents and tour brokers,” said ]them aat Peace. “Their insights and collaboration are invaluable as we prepare to introduce direct flights to London. We sincerely appreciate their continued…

Read More