We live in a very insecure and tenuous digital world. Technology is critical to the success of any business but with it comes supernumerary cybersecurity risks. Not a day passes without a poignant reminder of this fact. A recent landmark study of cybercrime by Web of Profit research showed cybercriminal revenues worldwide of nearly $1.5 trillion. This involved a variety of illegal cybercriminal activities including:
$860 billion – Illicit/illegal online markets
$500 billion – Theft of trade secrets/IP
$160 billion – Data trading
$1.6 billion – Crimeware-as-a-Service
$1 billion – Ransomware
This is not a pretty picture. In the face of these risks it is imperative that organizations defend themselves through technology, process and training. A holistic approach is required to address the issue of information security with any depth and vigor. Key to this is being connected to information sources that will keep you informed on the risks you face on a consistent basis. Herein, I’ll detail a variety of news and information sources which are incredibly helpful for businesses to be aware of the security threats they face. We encourage you to visit these websites for update information on addressing your business information security risks, as well as sign up for their associated newsletter or connect with them on social media. No matter how you connect, you’ll get up-to-data info on addressing information security threats as they happen. Here are a few security information resources we recommend you follow:
The National Cybersecurity and Communications Integration Center (NCCIC) is the Nation’s flagship cyber defense, incident response, and operational integration center. Its mission is to reduce the Nation’s risk of systemic cybersecurity and communications challenges. It is a powerful source of information security news for organizations of any size. Additionally, its newsletter is a great way to stay in touch with the happening in the security world.
The SANS Institute is a cooperative research and education organization. At the heart of SANS are the many security practitioners in varied global organizations from corporations to universities working together to help the entire information security community. SANS has a plethora of deep insights on its website and newsletters.
FTC Consumer Alerts
The Federal Trade Commission (FTC) is an independent agency of the United States government, established in 1914 by the Federal Trade Commission Act. Its principal mission is the promotion of consumer protection and the elimination and prevention of anticompetitive business practices, such as coercive monopoly. The FTC is a great information source for on the many crimes that face businesses such as identity theft, scams and other realworld/cyber threats.
Operating System Vendors
Both Apple and Microsoft have websites with details on the latest security news, tools and best practices.
Microsoft Security Response
Apple Security Website
Many of the quality anti-malware vendors can be a great source of security news and insights for your business.
ESET Security News
McAfee Threat Center
Symantec Security Center
Sophos Security News
Key Information Security Blogs
A variety of security blogs that give detailed coverage to security concerns from AI to IoT and everything in between.
Schneier on Security
We encourage you to explore these information security resources. Read up, subscribe to newsletters, follow these resources on Twitter, LinkedIN or elsewhere. What ever you do, stay aware of the risks that threaten your organization or you’ll risk becoming part of the sad statistics we explored at the beginning of this article. Stay aware and stay safe out there.