The Biggest Info-Security Learning from 2018
As the volume of online transactions has gone up, so has the volume of data breaches that organizations face. Non-compliance to norms is obviously a leading reason for the occurrence of data breaches. In our own experience with PCI Forensic Investigation (PFI) projects in 2018, we found that as far as breaches at the network level were concerned, 62 percent of organizations were non-compliant at the time of breach. This essentially meant that they had not properly configured the network layer, thereby making room for intruders to attack. Even for breaches concerning access control, 63 percent of organizations were found to be non-compliant at the time of breach; which means that there were no proper access controls implemented and configured. Most organizations had a fairly large “window of vulnerability” or a phase during which a system, environment, software, and/or website could potentially be exploited by an attacker. The best way to reduce the window of vulnerabi...