Page 70 - Grapevine NovDec 2021

International News
information on the Dark Web for a tidy profit and
scarily enough, you might never know you’ve been
compromised.
Just Enough Rain to Stress the Vine:
A walk in the cloud(s)
In the face of myriad risk and attack vectors, it’s
tempting to take the path of least resistance, and
send up a prayer that you’ll be among the lucky
ones to not suffer a cyber breach. But in today’s
climate, that’s risking a lot more than bottle shock.
Companies today, regardless of their size or indus-
try, need to assume that it’s not a matter of if
they will be targeted by cyber crime, but when.
Depending on your size and budget, running a full-
scale Security Operations Center might not be in
the cards, but there are steps you should be taking
to protect your business today and in the future:
● Suspicious emails should trigger the same
reaction as a wine that’s corked. Avoid it at
all costs. Phishing emails are a popular attack
vector, and unless you know what to look for
(and how), you are putting yourself and your
company at risk each and every day. Educate
your staff on what to look for and make sure
that whatever training they receive is specific
to the vineyard/wine industry. People like to
think they won’t fall for the “Congratulations!
You’re a winner” emails, but are they prepared
to investigate those emails from your attorney
or best vendor? Additionally, you should ensure
that your department systems are segmented,
preferably using the principles of Zero Trust.
That way, if one person accidentally opens a
malicious email, they won’t be granting a hack-
er access to the whole system.
● Maintain Security Hygiene: Network systems
need to be maintained and cared for just as you
would oak barrels. Security hygiene is a critical
component of cybersecurity and at the very
least should include: ● Automation technology is complicated and pro-
1. Regularly patch and update your software
You’d be surprised at the number of breach-
es that could have been avoided simply
by keeping software systems patched and
up-to-date. It’s estimated that a third of all
data breaches come as a result of unpatched
vulnerabilities when patches were available.
(Looking at you, Equifax).
Page 68 The Grapevine • November - December 2021
Grapevine Main Pages GV111221_Layout 1-1 .indd 68
2. Two-Factor Authentication Is a MUST . Make
sure to implement two-factor authentication
around all of your company’s key software
applications and systems, providing an addi-
tional layer of security. Never, ever reuse
passwords across accounts or devices, and
if your budget allows, implement solutions
that employ a Software Defined Perimeter
(SDP) approach. Be aware, however, that
while these solutions offer advanced secu-
rity, because they are more complex they
are costlier; plus, there are the added costs
associated with hiring staff who have the
proper expertise to manage them.
3. Operate on a need-to-know-basis. In gen-
eral, it’s a good idea to limit the amount
of network access your employees have
— compromised accounts can be used to
create shadow employee accounts which
in turn can be used to move around a net-
work. It’s especially important that top-level
executives and owners aren’t given the full
set of keys to the kingdom just because
they’re the boss. Senior-level employees
and owners are prime targets for cybercrim-
inals looking for ways to infiltrate a system
and move around with impunity. Someone
might ask why your front-desk staff is nos-
ing around a payroll system, but no one will
question the boss.
4. Virtual private networks (VPN) are more
than a good idea. They provide secure and
encrypted connections between systems
(files shares, email servers, etc.) and ensure
that your communications can’t be inter-
cepted.
5. Lock down your operational technology (OT)
systems and ensure that they are not left
internet-facing.
tecting it, even more so. You can’t assume that
everyone further down the supply chain is tak-
ing a serious approach to cybersecurity or even
knows where to start. It’s incumbent on you to
protect your business, so talk to the experts. Be
sure to talk with your insurance providers, legal
team and other key vendors to ensure you have
a plan in place for when the inevitable happens.
877-892-5332
10/26/21 3:44 PM