CIO

Since January 2022, cyber attacks in Germany have increased. Studies on cybercrime and cyber threats emphasize the importance of a balanced allocation between cyber security investments and potential damages.

The NIST Framework, consisting of the elements IDENTIFY, PROTECT, DETECT, RESPOND, and RECOVER, places equal priorities on strengthening cyber resilience. However, reality shows that protection against the impacts of cyber attacks is often insufficient. While securing the infrastructure is crucial, focusing solely on "prevention" is not enough.

It is recommended to also prioritize the phases of DETECT, RESPOND, and RECOVER. Companies that pay ransom usually have up-to-date network and endpoint security solutions. Additionally, reports emphasize that 73% of ransomware-affected companies possess encrypted backup copies. The most common cyber attack is the "Denial-of-Data" (DoD) attack, particularly through ransomware. These are financially motivated attacks that threaten control over one's own data.

Cyber attacks have now become the driving force for data recovery, and it is recommended to implement best practices such as using an immutable file system and air gaps for backup data. Known vulnerabilities in backup data should also be continuously monitored. Compliance with NIST security standards as well as the automation of playbooks are crucial for an effective response to emergencies and an accelerated recovery after an attack.

NIST security standards, such as modern data backup, encryption, detection, risk assessment, and recovery testing, are key components for data resilience and security.