Over the past few days, new hacking and ransomware attacks have shaken the world, particularly the UK, USA and Europe.<\/p>\n
New examples include the ransomware attack of the UK company and global advertising giant WPP, the hacking of parliamentarians\u2019 e-mail system in the United Kingdom, as well as the most recent ransomware attack that targeted the Ukrainian government and some of the biggest companies in Europe.<\/p>\n
Grant Thornton\u2019s director: IT Advisory, Michiel Jonker, believes that companies rely too much on preventative controls.<\/p>\n
Businesses and governments need to completely change their thinking in terms of cyber security and start planning their controls around the paradigm of guaranteed failure against attacks.<\/p>\n
\u201cA change in thinking will enable companies to focus sufficient attention on the efficacy of detective and corrective controls, and thereby recover much faster, following cyber-attacks,” Jonker said.<\/p>\n
\u201cWe have been conditioned to plan for success in the war against cyber-crime, but we have not been able to prevent all attacks\u201d he said. He believes this is outdated thinking which is not appropriate for the modern interconnected world in which we are operating.<\/p>\n
\u201cCompanies are often caught on the back foot when they do get targeted by a cyber-attack. It will take them longer to recover and restore integrity to their systems, as their detective and corrective controls \u2013 those used to find and solve the problem \u2013 will be weaker than the controls relied upon to prevent attacks from happening,\u201d said Jonker.<\/p>\n
He urged organisations to shift their focus to improving their detective and corrective controls.<\/p>\n
\u201cThis is not an approach that will sit well with many risk managers as nobody likes to plan for failure, but it is unfortunately the new reality.\u201d<\/p>\n
In addition to bolstering these controls, he suggests organisations take an unconventional approach to protecting the integrity of critical systems.<\/p>\n
\u201cWe have believed for some time that strategic infrastructure assets \u2013 such as nuclear power stations, dams and hospitals \u2013 are increasingly at risk of attack, which would have a devastating impact on potentially millions around the world. And today, we have learnt that the monitoring system of the Chernobyl nuclear plant was one of the targets in the Petya ransomware global attack which occurred earlier this month,\u201d he said.<\/p>\n
Jonker believes that the nature and frequency of attacks on strategic assets will increase in severity, and that governments need to plan appropriately.<\/p>\n
\u201cThey need to consider disengaging certain elements or systems of critical infrastructure from the grid and operating these \u2018offline\u2019, which should go a long way to securing the integrity of important assets.\u201d<\/p>\n
He acknowledges, however, that this complete disengagement is not always realistically possible for many other organisations, as there is often a need for access to some form of online system.<\/p>\n
\u201cThere has been some global research into creating closed cyber eco-environments for very sensitive assets or infrastructure in organisations \u2013 for those who don\u2019t want to totally disengage from the grid, for many reasons. These stealth mode systems allow companies to disengage from the grid to a certain extent, by allowing them to operate \u2013 including via e-mail, voice and instant messaging,\u00a0 with a much higher level of security.\u201d<\/p>\n
Jonker believes the increasing complexity of cyberspace calls for a drastic change in risk management.<\/p>\n
\u201cIt is unrealistic to expect employees to \u2018think like a hacker\u2019, as cyber criminals and their tools have become much more sophisticated over the years. Normal users cannot outsmart criminals. Companies and governments are infinitely more complex than they were in the past, yet our thinking around protecting the integrity of the crucial systems have not evolved to the same degree.\u201d<\/p>\n
“This is just the beginning. The worst is still to come,” Jonker warned. “The sooner organisations realise this and plan appropriately, the better prepared they will be against inevitable future cyber-attacks.<\/p>\n
<\/p>\n