Within the software team Dicker Data boasts a growing number of cyber security focused vendors. You can view the technologies in our cyber security software matrix, which outlines the solutions and how they can work together.

A lot of organisations are moving to the cloud, but they still have to ensure they are compliant to current laws and regulations. But having parts of their infrastructure managed by a cloud provider means they need transparency of their platform, systems, usage and users. Without this transparency, you will not be able to identify risks that are born from usage. Unlike On-premises or private clouds which generally have clearly defined roles such as datacentre provider, data owners, custodians etc, public clouds use a shared responsibility model that requires you to be even more diligent in your efforts for compliance.

Learn more about Cloud Compliance here.

A layered security model is a security strategy considering that there is not a single system / appliance / software that will be able to stop all the attacks coming into a network. So the idea is to have additional systems that can ensure a better coverage. How to decide what should be implemented? It is possible to look into an existing layer model like the OSI (Open Systems Interconnection) model for networking that has 7 layers. Traditional security mechanism feature in the lower levels (1 - 4) but with the emergence of services and applications, levels 5 – 7 grew in importance.

Secure your everything: a guide to layered security.

Collecting data such as business and personal information has always been a commonplace practice for a range of companies. While it was assumed that businesses should lock it down and keep it safe as part of standard operating procedure, unless there was gross negligence or a huge attack it has not been front of mind for many companies, in particular SMBs.

GDPR (General Data Protection Regulation) and NDB (Notifiable Data Breach) are frameworks for industry to make sure that all necessary data is protected, and reinforced via fines or censure if infringements have been proven. While GDPR focuses on personal data of European citizens, it is still enforceable to any Australian business that has an establishment, offers goods and services or monitors the behaviour of individuals in the EU. It should also be noted that the Australian Privacy Act 1988 shares many common requirements with GDPR.

Device proliferation is increasing, research shows device usage is on average 2.4 devices per user. As these numbers rise, a business’ attack surface (endpoint or device) is also increasing. Whether using Windows, Mac, Android, IoS, Endpoint protection is a critical component of a comprehensive business security strategy.  From the basic anti-malware and web protection up to a complete EDR (Endpoint Detection and Response), endpoint security vendors offer today a great variety of features to enable businesses to protect their endpoints.

Zero Trust can be defined in many ways and have just as many models as outlined by different vendors and Cyber Security organisations. The overarching Zero Trust model has one axiom: “Trust No One” and a good security posture should be planed and implemented with this in mind.  The reason for this model is that attacks and threats can transpire from inside the network as well as from the outside.

Therefore, no Device or User should be given default access to any resource and every access  should be protected with a reputable authentication solution and security protocols, whether accessing from within the network perimeter, or from the outside.

5 Steps to Implementing a Zero Trust Security Strategy

Everyone using a computer or smart device has a role to play in cyber security. The relaxed culture of  our society, and lack of knowledge is what the cyber criminals prey on. Phishing, simple and easily guessable passwords, misconfigured security applications, all these vectors are the most common methods cyber criminals gain access to systems.

By bringing cyber security awareness to your attention, the statistics of social engineered cyber-attacks can be significantly reduced. Simple policies to increase password and authentication complexity and security, and education to recognise threats; this all plays a role in implementing your cyber security.

Find out more about the role of people in cyber security here.

If you are not yet a Dicker Data partner, you can become a partner here. 

If so, contact the team and our security specialists will be in touch to walk you through the process.