I-Cyber ​​​​Security: Izindlela zokuphepha ze-cyber ezi-3 eziphezulu “ezingezona ezobuchwepheshe” zango-2023

I-Cybersecurity ayigcini nje ngezobuchwepheshe. Izici okungezona ezobuchwepheshe, njengokuphatha abantu, izinqubo kanye nobuchwepheshe, zibalulekile ekuthuthukiseni izinga lokuphepha kanye nokunciphisa ubungozi be-inthanethi kanye nokunciphisa izinkinga zokuphepha ku-inthanethi. Ngeshwa, lokhu kuvame ukunganakwa. 

Okuthrendayo ezindabeni ze-cybersecurity onyakeni ozayo:

ukuphathwa kwamathuluzi okuvikela kuzoba okuyisisekelo

Secondo Vendr, inkampani evamile ichitha cishe u-$135.000 ngonyaka kumathuluzi e-SaaS engawadingi ngempela noma awasebenzisi. Futhi inhlolovo ka-Gartner yango-2020 ithole ukuthi ama-80% abaphendulile awasebenzisi phakathi kuka-1 no-49% wokubhaliselwe kwabo kwe-SaaS.

I-Shelfware yenzeka ngenxa yezizathu eziningi, okuhlanganisa izinkinga zokuhlanganisa, ukuxhumana okuhlulekile phakathi kweminyango, ukusekelwa okungekuhle kwabathengisi, noma ukuguqulwa kwendima ye-CISO.

Noma ngabe iyini imbangela, ama-CISO adinga ukunaka kakhulu ukuphathwa kwamashalofu ngo-2023 njengoba izici zomnotho zizoholela ekuncipheni. Ukukhulula ibhajethi yakho kokubhaliselwe kwe-SaaS okungasetshenzisiwe.

Cabangela lezi zinyathelo ezintathu ezilandelayo:

1. Ikhwalithi phezu komthamo: Esikhundleni sokwethula imikhiqizo eqondise izinkinga njengoba ziphakama, yima bese ucabanga ngesithombe esikhulu. Uma usukhombe ububanzi kanye nezinga lenselele yakho yokuphepha, yenza ukuhlola okuphelele kobuchwepheshe ukuze uqinisekise ukuthi isisombululo sihlangabezana nezidingo zakho namuhla nakusasa.
2. Bandakanya ababambiqhaza ababalulekile kunqubo yokuthenga: Kusuka kochwepheshe bezokuphepha kuye konjiniyela, qiniseka ukuthi uqoqa izidingo zabasebenzisi nezebhizinisi ngaphambi kokuthenga ukuze uthole okuningi kutshalomali lwakho. Lokhu kuzoqinisekisa ukuthi izidingo zebhizinisi ziyahlangatshezwa, okuholela ekwamukelweni okukhulu nokushesha.
3. Yenza uhlelo lokutholwa: Abanye abathengisi abalambele imali bazonyamalala ngemva kokuba usayine ulayini onamachashazi, okukushiya ukwazi ukuthi ungawusabalalisa kanjani futhi uwusebenzise kanjani umkhiqizo wabo. Buza umthengisi ukuthi yikuphi ukuqeqeshwa, ukugibela, nokusekelwa okuqhubekayo okufakiwe ngaphambi kokuthenga noma yini. Ukushoda kwamakhono kuyinkinga eqhubekayo; ukutholwa kalula nokusetshenziswa kubalulekile emaqenjini anezinsiza ezilinganiselwe.

ukushoda kwamakhono okuphepha ku-inthanethi kuzoqhubeka kudala ukungezwani

Nakuba ukushoda kwamakhono emkhakheni we ukuphepha kwekhompyutha isiqala ukwehla, izinkampani zisadonsa kanzima ngamazinga aphezulu okwenza inzuzo. Inhlolovo ye-ISACA ibike ukuthi amabhizinisi angama-60% abe nobunzima bokugcina ochwepheshe bezokuphepha ku-inthanethi abanamakhono futhi abangaphezu kwesigamu banomuzwa wokuthi abanabasebenzi abancane noma abancane kakhulu.

Ukuthola nokugcina ithalente elihle esandleni kuyinselele, futhi njengoba izintambo zesikhwama ziqina, kunemali eningi kanye nezinzuzo zokunikeza abazongenela ukhetho. Ukugcina i-IT ingabi ngumnyango ojikelezayo, ama-CISO adinga ukuvala izikhala kusiko lwawo lwebhizinisi.

Zibuze: Kungani umhlaziyi omkhulu efuna ukungisebenzela ngaphezu kweholo? I-ISACA ithole ukuthi izizathu ezintathu eziphezulu ochwepheshe bezokuphepha ku-inthanethi bashiye imisebenzi yabo (ngaphandle kwenkokhelo) yilezi: amathuba alinganiselwe okukhushulwa kanye nentuthuko, amazinga aphezulu okucindezeleka komsebenzi, nokuntuleka kokusekelwa kwabaphathi.

Ama-CISO nawo adinga ukuqaphela ukuthi ukuqasha abasebenzi abasha kuwushintsho oludinga ukuguquguquka. Ukuqasha okuhle kungasiza ukusungula izinqubo ezisebenza kahle zokunqoba izinkinga zamanje. Inhlangano yakho ngeke igcine ngokuthola izinzuzo zokuvikeleka okwengeziwe, kodwa ukusekela ukuqamba okusha kuwukuwina kwesimilo seqembu kanye nokugcina abasebenzi ababalulekile.

ubuchwepheshe bolwazi obusabalalisiwe buzoshiya ama-CISO engazi

Izinsuku ze-IT ye-monolithic zisemva kwethu. Ukuguqulwa kwedijithali, ukusheshisa ukwamukelwa kwamafu, kanye nokwanda kwabasebenzi abakude kuye kwaholela ekuthelelekeni kwe-IT esabalalisiwe nesithunzi. Ukuthengwa okungagunyaziwe okuseduze kwe-IT okwenziwa ngaphandle kokuthengwa kwe-CISO noma umnyango wokuthenga, njenge-shadow cloud/SaaS kanye ne-shadow OT, nakho kuwukukhathazeka okukhulayo.

Amabhizinisi asabalaliswe kakhulu abhekene nomsebenzi (obizayo) wokuvikela amasistimu asabalalisiwe nedatha kuyo yonke imisebenzi ekude, indlunkulu, amafu, njll.

Ukumane uvimbele izinhlelo zokusebenza ezingagunyaziwe namadivayisi ngeke kuxazulule izinkinga ze-IT zesithunzi; abasebenzi bazothola indlela yokuyizungeza ukuze benze imisebenzi yabo, futhi cishe akunakwenzeka ukwazi kahle ukuthi yini okufanele ivinjwe futhi ivunyelwe.

Ama-CISO adinga indlela entsha ukuze akhanyisele lokhu kukhathazeka okukhulayo. Ngokungeziwe ekusebenziseni ubuchwepheshe obufanele, isiko eliqinile lokuphepha kufanele lisungulwe kuyo yonke inkampani. Ukuhambisana nezidingo zenhlangano, izinkathazo, izimfuno kanye nemikhuba kuzosiza abaphathi bezokuphepha 'bakhulume ulimi' lwabasebenzi kangcono ukuze baqinisekise ukuqeqeshwa okusebenzayo.

Ukuqeqeshwa kokuphepha kwabaphathi nezindima eziphezulu kubaluleke kakhulu kunenkampani yonke. Fundisa i-C-suite, abaholi beyunithi yebhizinisi nonjiniyela bebhizinisi ukuthi ukuphepha, ubumfihlo bedatha, ukuthobela kanye nokulawulwa kwezingcuphe kusebenza kanjani ekusetshenzisweni kwe-IT, ukuze bazi lapho bedlula ulayini futhi kufanele bathinte i-'IT.

BlogInnovazione.it