Success Story
How we helped a local council identify and mitigate their cyber risks Despite being a long-standing client, a large district council wanted to gain a deeper understanding of their cyber risk and potential weak points in their defences. To address these concerns, we conducted a workshop with the local authority to build a high-level view of the state of their cyber security and what it would take for them to achieve best practice. To do this, we assessed three areas and their current level of cyber maturity: • The ability to protect against cyber criminal activity • The ability to detect cyber criminal activity • The ability to recover from a cyber related incident
What was achieved? After the workshop, our findings identified a number of high-risk areas within the council’s environment. These included low levels of visibility across their estate and gaps in protection that would have made it difficult for the council to quickly detect a threat, or even establish whether an intrusion had taken place at all. Using the information provided by the council, we prepared recommendations to improve their cyber resilience and reduce the risk of operational impact from cyber criminal activity.
20
We provided recommendations for the following areas: • Endpoint security • Server security • Network security • Email security • Web security • Cloud security • Identity and access security In particular, we determined that the council needed to focus their attention on improving the protection of their sensitive data and their overall approach to visibility and response. Despite having email and web gateway solutions with the ability to implement data leak prevention, the different management interfaces made it difficult for the council to implement a unified data leak prevention policy across their entire environment, which left gaps in the visibility and control of their sensitive data. We recommended the council take a unified approach across all devices and applications SECON CYBER
