SOC Monitoring Crucial

Phil Neray is CardinalOps‘ vice president of cyber defense strategy.

“Apart from the usual sage advice on ransomware — make sure you’re up to date on patching and backups, and have already implemented multifactor authentication (MFA) — I recommend making sure you have 24×7 security operations center (SOC) personnel monitoring your networks for any unauthorized or suspicious activity, so they can quickly shut down an attack before it reaches your crown jewels,” he said. “Even the most rigorous patching regime can’t protect against one of your trusted suppliers being compromised in a supply chain attack or one of your users having their credentials stolen, so rapid detection and response is essential.”