SYN-of-the-week 1: Pride

Our first SYN-of-the-week is PRIDE.

Pride is the overconfidence in your own ability to spot and avoid cyber threats which can lead to complacency. In the some cases, “the basics” start to slip or it goes so far that security is down prioritized because “it couldn’t happen to us”. In the worst case, this leads to breaches.

Cyber security requires vigilance and discipline – risks to our most sensitive data and most critical systems should be identified and managed. Cyber security professionals unfortunately have an entire attack surface to manage, and attackers often need only one (un)lucky foothold to begin exploitation.

It is interesting to look at Information is Beautiful’s (@infobeautiful) “World’s Biggest Data Breaches and Hacks” visualization. By sorting on the different causes it shows how simple mistakes or oversights can lead to big, big breaches. Also interesting to follow is @haveibeenpwned ‘s list “Who’s been pwned?” for continuous updates on the latest, large-scale personal data breaches.

The counterbalance to pride is HUMILITY.

Foster humility by acknowledging that no one is infallible. First and foremost, make sure that “the basics” are covered. Recognize the importance of continuous learning. Stay up-to-date on the latest cyber security threats and countermeasures. And, last but not least, ensure that security practices are in line with the organization’s risk appetite.

Image: Dall-E2
@infobeautiful, @haveibeenpwned

Submit a presentation or workshop idea! https://2023.bsidesmunich.org/callforpapers/
Sponsor BSidesMunich and our community!https://2023.bsidesmunich.org/sponsors/

#BSidesMunich23, #7SYNs


Posted

in

by

Tags: