{"id":51825,"date":"2021-09-06T13:07:31","date_gmt":"2021-09-06T12:07:31","guid":{"rendered":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/?p=51825"},"modified":"2021-09-07T14:13:44","modified_gmt":"2021-09-07T13:13:44","slug":"future-proof-secure-against-cyberattacks","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-gb\/industry\/blog\/cross-industry\/2021\/09\/06\/future-proof-secure-against-cyberattacks\/","title":{"rendered":"How to future-proof and secure your organisation against cyberattacks"},"content":{"rendered":"
<\/p>\n
The evolving threat landscape has highlighted how attackers are refining their tactics and techniques. It also shows just how far they\u2019re willing to go to disrupt organisations with cyberattacks.<\/p>\n
Let’s take the example of human-operated ransomware, and the deliberate targeting of critical infrastructure. This is designed to cause as much financial, operational and societal impact as possible. Additionally, this is often compounded by the pressure from consumers, media and government \u2013 and one where core supply chains are cut off or severely disrupted. While the motivation of the cyberattack varies, there is a rise of recklessness. Attackers go beyond disruption into destruction as they learn how to combat and evade security defences. This puts business leaders in a position where they feel they have limited options. With the response likely to play out in the public domain, they often feel like they must pay the extortion demands either to restore services or prevent further disruption.
\n<\/p>\n
Enterprise resilience is needed to recover from human-operated cyberattacks. This goes beyond just cyber resilience. It requires a multi-faceted business, technology and operational response to recover services as quickly and effectively as possible across all domains. Resilience is the ability of the business to recover from failures and continue to function, in adverse conditions. It’s not about avoiding<\/em> failures. It’s about taking proactive action to detect and respond<\/em>\u00a0to failures in a way that reduces downtime or data loss.<\/p>\n In the Microsoft Societal Resilience research program<\/a>, we define resilience as\u00a0the capacity to anticipate, absorb, and adapt to disruption<\/em><\/strong>. As Dr Peter Lee, Microsoft CVP of Research and innovations, says: \u201cIf we don\u2019t acknowledge our risks, we can\u2019t anticipate and prepare for them\u201d. This is especially true in today\u2019s world of radical innovation, where the threat actors often move faster than organisations do.<\/p>\n <\/p>\n Business continuity and information protection are absolute requirements for every business. But it can often entail cost, complexity, compliance, and resource to maintain. Using a cloud-based strategy helps to mitigate many of these issues. Building reliable and secure systems in the cloud is a shared responsibility. The reliability \u2018of<\/strong>\u00a0\u2018the cloud is the responsibility of the cloud service provider. The reliability\u00a0\u2018in\u2019\u00a0<\/strong>the cloud is the responsibility of the organisation. However, according to the\u00a0National Cyber Security Centre, only three in 10 businesses have business continuity plans that cover cybersecurity<\/a>.<\/p>\n <\/p>\n Those new to cloud should begin with Azure\u2019s Cloud Adoption Framework,<\/a> to determine business drivers and strategy. The Microsoft Azure Well-Architected Framework<\/a> is a set of guiding tenants that architects, developers and solution owners can use to build and optimise reliable, secure and resilient services in the cloud.<\/p>\n Designing for reliability requires an assume failure mindset. Designing for security requires an assume compromise mindset.<\/p>\n Cybersecurity is hard to mitigate for. Adversaries are working to counteract the business continuity strategy by actively adapting and navigating the controls that the business has implemented. If a plan is too rigid and does not anticipate change, it can often fail as the business is not able to react and pivot quickly enough to the ferocity of change or cyberattacks.<\/p>\n Machine learning and AI can take the pressure off IT or security teams with real-time threat detection and automation. This allows them to focus on higher value tasks, such as designing resilient workloads.<\/p>\n Designing workloads that are resistant to both natural disasters and malicious human intervention such as cyberattacks requires a thoughtful combination of high availability, disaster recovery and backup solutions. Across the whole environment, you need to consider how likely the primary control is to fail and the potential organisational risk if it does. Additionally, you need to counteract any of these with mitigating factors.<\/p>\n You can specifically address HA and DR needs with storage redundancy<\/a> solutions that simultaneously replicate data and services to an alternative location. However, a secondary location can be impacted at the same time a near-real-time attack encrypts data in a primary location. This results in data loss or corruption.<\/p>\n When designing a backup solution for business-critical data in the cloud consider a tertiary, immutable backup<\/a> (write-once-read-many). This is both physically and logically held away from any primary and secondary backups. As a result, there is another layer of protection against data loss, corruption, or malicious encryption. This is a good option for highly sensitive and regulated entities who are required to legally hold data. Azure Backup<\/a> provides security features to help protect backup data even after deletion; one such feature is soft delete<\/strong>. If a backup is accidentally or maliciously deleted, soft delete retains it for an extra 14 days. Remember, regularly validate and test backup and restore procedures.<\/p>\n Often one of the most overlooked part of resilience is protecting the identities that have access to backups. As a result, compromised accounts can be used maliciously to encrypt or delete backups. Even in the example of soft delete, a compromised account with the appropriate rights can disable the feature before deleting backups.<\/p>\n Attackers deliberately target these resources because it impacts the ability to recover. Mitigate this by granting accounts the minimum privilege required to accomplish their assigned tasks<\/em><\/strong>. Limit the number of accounts with access to backups (but with a break-glass account included). Protect these with multi-factor authentication (MFA), which stops 99.9% of account compromise attacks<\/a>. You should also consider just-in-time and just-enough access using dedicated privileged access workstations (PAWS). Log and monitor all changes for verification and compliance.<\/p>\n To truly know if your strategy can hold up against cyberattacks, you need to successfully measure reliability and security to and understand the resilience of that system. This means testing end-to-end workloads against a range of severe but plausible scenarios.<\/p>\n Chaos engineering<\/strong><\/a> is the practice of subjecting cloud applications and services to real world failures and dependency disruptions to build, measure and improve resilience. Fault injection<\/strong><\/a> is the deliberate introduction of a failure into a system to validate robustness and error handling.<\/p>\n We use fault injection at Microsoft to induce a major failure or disaster and validate both the recovery and incident management processes. We place strict access controls around this capability to prevent accidents or malicious attacker abuse to safeguard and limit the impact of the testing. This enables the business and IT to consider and prepare for a range of scenarios that determine the robustness and design of the overall solution in a safe environment. It also increases the resilience and confidence in Azure and our services.<\/p>\n Microsoft Ignite 2021 provided a first look at Azure Chaos Studio<\/a> which is our upcoming native chaos engineering and fault injection service. This will help organisations to measure, understand, and improve the resilience of their Azure applications.<\/p>\n Organisations require a level of preparedness that anticipates and adapts to a range of scenarios, whether accidental or malicious. The strategy needs to be flexible to adapt to the evolving threat landscape and be capable of delivering effective and scalable enterprise-wide recovery.<\/p>\n The good news is that cloud architectures can help improve enterprise resilience goals whilst enabling effective business continuity.<\/p>\n Learn more about backup and disaster recovery<\/a><\/p>\n Human-operated ransomware attacks: A preventable disaster<\/a><\/p>\n Rapidly protect against ransomware and extortion<\/a><\/p>\n Cybersecurity best practices to implement highly secured devices<\/a><\/p>\n Introduction to cybersecurity learning path\u00a0<\/a><\/p>\nPlanning for enterprise resilience against cyberattacks<\/h2>\n
How to build a secure cloud strategy<\/h2>\n
Design for reliability and security<\/h2>\n
Choose the right workload<\/h2>\n
\n
Protect privileged identities against cyberattacks<\/h2>\n
Validate your response to cyberattacks<\/h2>\n
Anticipate and adapt<\/h2>\n
Find out more<\/h2>\n
Resources to empower your development team<\/h2>\n