Eric Spitz

Over the last few years there has been an epidemic of Cyber Crime which has had a worldwide effect on businesses. The cost of a Cyber Crime to a business can be extreme, ranging from reputational damage or worse, significant financial loss. With heightened awareness companies can fight back. The first step is to determine the current state of Cyber Security within your organization and where you want your security posture to be. Businesses fall into three categories: Reactive, Compliant, and Proactive. Reactive – Companies in this category typically have little to no security controls in place. Businesses might rely on a single, or few layers of security which for example may include anti-virus software and a firewall. To compound the risks these companies typically don’t have policies or procedures in place to protect sensitive data and seldom ever have an incidence response plan. Compliant – Today most businesses fall within the “compliant” category. A compliant company has a more layered security approach, has formal policies and procedures in place and oftentimes utilize a single or multiple compliance frameworks to help shape their security strategy (PCI, HIPAA, etc). Proactive – A company with a proactive security posture utilizes a complex, layered defense-in-depth approach implementing best-of-breed solutions and industry best practices. A "proactive" company will have a robust perimeter defense, an identity & access management solution, encryption, endpoint protection and typically a Security Operations Center to have real time situational awareness. The threat landscape is constantly changing and so too are the defenses to protect against attackers. This is the reason Risk Assessments should be conducted periodically by a qualified Security Consulting Firm such as Tevora. This is where I come in. Let me help you and your company to determine where you might be at risk, how much exposure you have, and what remediation should you take.