The most common attacks are carried out with malicious software targeting employees’ computers and by guessing simple passwords. Most of these attacks can be technically stopped, even if employees were to click on malicious software.
Here are five effective technical measures system owners should use to protect their systems against internet-related data attacks:
- Install security updates as soon as possible, possibly as an automatic (but monitored) process.
- Do not grant administrator or power-user privileges to end-users.
- Do not permit the use of weak passwords, and enforce the use of multifactor or passwordless authentication methods where possible.
- Remove technical debt; phase out older ICT products.
- Only permit the use and installation of software approved by the organization or device vendor.
