|
Content Assessment: A Different Kind of Booster? Cybersecurity Best Practices for Improved Attack Resilience
Information - 89%
Insight - 88%
Relevance - 92%
Objectivity - 90%
Authority - 90%
90%
Good
A short percentage-based assessment of the qualitative benefit of the recently published joint European Union Agency for Cybersecurity (ENISA) and CERT-EU report on cyber resilience.
Editor’s Note: The European Union Agency for Cybersecurity, ENISA, is the Union’s agency dedicated to achieving a high common level of cybersecurity across Europe. In February of 2022, ENISA, in conjunction with the Computer Emergency Response Team (CERT-EU), published the report Boosting Your Organization’s Cyber Resilience.
The report provides a general overview of cybersecurity best practices that, when applied in a consistent and systematic manner, may be able to help organizations improve their cybersecurity posture and enhance overall attack awareness.
This new report may be beneficial for cybersecurity, information governance, and legal discovery professionals operating in the eDiscovery ecosystem as they consider cyber discovery through the lens of increasing cyber threats.
Press Announcement and Report*
Boosting your Organisation’s Cyber Resilience
European Union Agency for Cybersecurity
ENISA, the EU Agency for Cybersecurity, reported a substantial increase of cybersecurity threats for both private and public organizations across the EU. Three factors are at play in such a trend:
- Ransomware remains a prime threat, putting millions of organizations at risk.
- Cybercriminals are increasingly motivated by the monetization of their activities.
- Attacks against critical infrastructure are rising exponentially and other economical sectors as well as society at large can be exposed.
An analysis of the rise in major threats is made available in the Agency’s 2021 Annual Threat Landscape report.
In its Threat Landscape Report Volume 1, CERT-EU, the CERT of all the EU institutions, bodies and agencies (EUIBAs), reported that the number of attacks conducted by Advanced Persistent Threats (APTs) against EUIBAs increased by 60% in 2020 compared to 2019. These attacks have further increased by 30% in 2021, bringing the total number of significant incidents experienced by EUIBAs to 17, up from only 1 in 2018.
In light of the above, ENISA and CERT-EU strongly encourage all public and private sector organizations in the EU to adopt a minimum set of cybersecurity best practices, available here: “Boost your Organisation’s Cyber resilience – Joint Publication”.
This publication is mainly intended for decision-makers (both in IT and general management) and security officers (e.g. CISOs). It is also aimed at entities that support organizational risk management. By following these recommendations in a consistent, systematic manner, ENISA and CERT-EU remain confident that organizations in the EU will be able to substantially improve their cybersecurity posture and in doing so will enhance the overall cyber resilience of Europe.
Background
In 2021, the EU Agency for Cybersecurity and CERT-EU signed an agreement on a structured cooperation to work together on capacity building, operational cooperation and knowledge and information sharing. The provision for a structured cooperation was included in the Cybersecurity Act of 2019. ENISA and CERT-EU meet regularly to agree on joint activities to implement the Annual Cooperation Plans. This week, ENISA Executive Director, Juhan Lepassaar and Saâd Kadhi, the Head of CERT-EU will meet to further develop the cooperation.
Read the complete announcement.
Complete Report: Boost Your Organization’s Cyber Resilience (PDF)
Joint-Publication-Enhanced-Resilience_v.1.0-FINALAdditional Reading
- [Annual Update] International Cyber Law in Practice: Interactive Toolkit
- Defining Cyber Discovery? A Definition and Framework
Source: ComplexDiscovery
