Video | Agriculture | Confidence | Economy | Energy | Employment | Finance | Media | Property | RBNZ | Science | SOEs | Tax | Technology | Telecoms | Tourism | Transport | Search

 

One in five enterprises have experienced an APT attack




ISACA cyber security survey reveals that one in five enterprises have experienced an APT attack

14 February 2013—A global cyber-security survey of more than 1,500 security professionals found that more than one in five respondents said their enterprise has experienced an advanced persistent threat (APT) attack. According to the study by global IT association ISACA, 94 percent say APTs represent a credible threat to national security and economic stability, yet most enterprises are employing ineffective technologies to protect themselves.

APTs, an espionage tactic often intended to steal intellectual property, have made headlines in recent years for breaching major enterprise and government networks worldwide. Attacks such as the Google Aurora threat and the RSA breach make it clear that they pose a major threat to organisations in all industries, not just government. More than 60 percent of survey respondents say that it’s only a matter of time before their enterprise is targeted.

ISACA’s survey, Advanced Persistent Threat Awareness: Study Results, shows that 96 percent of respondents say they are at least somewhat familiar with APTs. While this is a positive finding, 53 percent of respondents say they do not believe APTs differ from traditional threats—indicating that many do not fully understand APTs.

“APTs are sophisticated, stealthy and unrelenting,” said Christos Dimitriadis, Ph.D., CISA, CISM, CRISC, international vice president of ISACA and head of information security at INTRALOT GROUP. “Traditional cyberthreats often move right on if they cannot penetrate their initial target, but an APT will continually attempt to penetrate the desired target until it meets its objective—and once it does, it can disguise itself and morph when needed, making it difficult to identify or stop.”

More than 60 percent of survey respondents say they are ready to respond to APT attacks. However, antivirus and antimalware (95 percent) and network perimeter technologies such as firewalls (93 percent) top the list of controls their enterprises are using to stop APTs—a concerning finding, given that APTs are known to avoid being caught by these types of controls. The study shows that mobile security controls, which can be quite effective, are used much less frequently.

“APTs call for many defensive approaches, from awareness training and amending third-party agreements to ensure vendors are well-protected, to implementing technical controls,” said Jo Stewart-Rattray, CISA, CISM, CGEIT, CRISC, FACS CP, director of ISACA and director of information security and IT assurance at BRM Holdich.

The study also found that:
• Loss of enterprise intellectual property was cited as the biggest risk of an APT (by more than a quarter of respondents), followed closely by loss of customer or employee personally identifiable information (PII).
• 90 percent of respondents believe that the use of social networking sites increases the likelihood of a successful APT.
• 87 percent believe “bring your own device” (BYOD), combined with rooting or jailbreaking the device, makes a successful APT attack more likely.
• More than 80 percent say their enterprises have not updated their vendor agreements to protect against APTs.

“We are only in February and already we can declare 2013 as the year of the hack,” said Tom Kellermann, CISM, trusted advisor to the US government and vice president of cyber security for Trend Micro. “ISACA's research reveals that enterprises are under attack and they don’t even know it. Bringing this awareness into the curriculum of education for security professionals is necessary to enable them to build the custom defence they need to combat these targeted attacks.”

The ISACA study, sponsored by Trend Micro, examined awareness of APTs, direct experience with APTs, security controls and processes in place, and APT impact on policies and practices. Full results are available as a free download at www.isaca.org/cybersecurity.

-ends-

© Scoop Media

 
 
 
Business Headlines | Sci-Tech Headlines

 

Auckland Transport: Successful Bridge Repair Opens Two Additional Lanes To Traffic

The opening of two additional lanes on the Auckland Harbour Bridge this morning will help relieve some motorway congestion for motorists heading home to the North Shore tonight. More>>

ALSO:

Statistics New Zealand: COVID-19 Sees Record 12.2 Percent Fall In New Zealand’s Economy

Gross domestic product (GDP) fell by 12.2 percent in the June 2020 quarter, the largest quarterly fall recorded since the current series began in 1987, as the COVID-19 restrictions in place through the quarter impacted economic activity, Stats NZ said ... More>>

ALSO:

Climate: Scientists Release ‘Blueprint’ To Save Critical Ecosystems And Stabilize The Earth’s Climate

A group of scientists and experts produced the first comprehensive global-scale analysis of terrestrial areas essential for biodiversity and climate resilience, totaling 50.4% of the Earth's land. The report was published in Science Advances ... More>>

ALSO:

MPI: Independent Review Launched Into Assurances For Safe Transport Of Livestock By Sea

The Ministry for Primary Industries (MPI) has launched an independent review of the assurances it receives for the safe transport of livestock by sea. MPI Director-General Ray Smith says Mike Heron QC has been appointed to lead the review, which is expected ... More>>

ALSO:


Computers: New Zealand PC Market Grows Nearly 40% Due To Work From Home Demand

COVID-19 had large impacts on demand for PCs as businesses prepared for lockdowns by purchasing notebooks to mobilise their workforce. In the second quarter of 2020, New Zealand's Traditional PC market experienced a 39.7% year-on-year (YoY) growth ... More>>

ALSO:


University Of Auckland: Whale-Watching By Satellite – Follow Their Travels Online

Scientists have successfully attached satellite tracking tags to six New Zealand southern right whales, or tohorā, and are inviting the public to follow the whales’ travels online. Part of a major research project involving the University of Auckland ... More>>

Commerce Commission: Kiwibank Admits System Failures And Agrees To Pay Customers $5.2 Million

Kiwibank has entered into a settlement agreement with the Commerce Commission after reporting that it failed to have in place robust home loan variation disclosure policies, procedures and systems. In a settlement dated 27 August 2020, Kiwibank admitted that ... More>>

Ministry of Health: Public Transport Distancing Requirements Relaxed

Physical distancing requirements on public transport have been reviewed by the Ministry of Health to determine whether they are still required at Alert Level 2 (or below). The Ministry’s assessment is that mandatory face covering and individuals tracking ... More>>

ALSO:

NZHIA: New Zealand Hemp Industry Set To Generate $2 Billion Per Annum And Create 20,000 Jobs

A new report says a fully enabled hemp industry could generate $2 billion in income for New Zealand by 2030, while also creating thousands of new jobs. Written by industry strategist Dr Nick Marsh, the report has prompted calls from the New Zealand Hemp ... More>>

ALSO:

Stats NZ: One In 14 Employed People Report High Risk Of Losing Jobs

About one in 14 workers say they expect to lose their job or business by mid-2021, Stats NZ said today. A survey of employed people in the June 2020 quarter showed 7 percent felt there was a high or almost certain chance of losing their job or business ... More>>

ASB Quarterly Economic Forecast: NZ Economy Doing Better Than Expected, But Challenges Remain

August lockdown estimated to have shaved 8% off NZ’s weekly GDP, and 0.5% off annual GDP Economy now expected to shrink 5% (year-on-year) by end of 2020 Unemployment rate now expected to peak at 7.2% The latest ASB Quarterly Economic Forecast is less ... More>>

ALSO: