Month: March 2022

As we rely more and more on technology at work and home electronic data has become a significant aspect of our daily lives (especially when it comes to our work) protecting that data becomes increasingly important, too. That's what World Backup Day is here to celebrate: keeping our data safe, secured, and available.

To celebrate this World Backup Day, we're going to be covering some of the best practices you can follow to keep your data safe. If you backup your data, these are the practices you need to be following.

7 backup best practices

1. Back up frequently

You should probably be backing up more frequently than you’d think - did you know that 21% of people have never made a backup? (backblaze.com). If you're not sure how frequently, think about how much work you're willing to lose. Two weeks' worth of work? A day? How about an hour?

The truth is, most of us can't afford to lose more than a few hours of work. That means you should be backing your data up multiple times a day if it's feasible for your business.

You can also increase the frequency of your data backups by fostering better data hygiene with your staff. You may only be able to backup your entire workplace's data set every few days/weeks, but individual employees should have no problem backing up data a few times a day.

2. Use multiple backup methods

Another important best practice for backing up your data is to use multiple backup methods. After all, we all know the dangers of keeping all of your eggs in a single basket.

We just covered one way that you can diversify your backups. Have your employees back up their data and conduct workplace-wide backups, too. Other ways to keep your backup methods varied is to use different locations and backup formats, for example remote backup in the cloud and local and offsite physical backups. The goal is to have at least a handful of backups in multiple locations, at multiple frequencies, and in multiple formats so that you're never at risk of losing everything all at once.

It's also important to think about the types of backup that you’ll use, you want to make sure that you can recover and restore your information as quickly as possible. Alternating types of backup, such as incremental daily backups and full weekly and monthly backups, will allow for a faster response when disaster strikes.

3. Encrypt your backups

Next, you should encrypt your backups. Encryption may sound like an intimidating practice, but it's relatively easy to do and adds a lot of security to your data. All it does is scramble your data in a way that only you can unscramble it.

This protects your data in the unfortunate case that it becomes the target of a hacker or internal threat. You'll retain some level of control over your data even as it's actively being targeted, helping you retain power in the situation.

The purpose of encryption is to make data security just as core to your approach as backing up your data.

4. Set an appropriate data retention span

Alongside backing up your data regularly, you should be setting an appropriate data retention span. This is how long you plan on keeping your data after it's been backed up. After all, keeping data backed up forever is costly and largely unnecessary.

You'll want to consider how long you keep backups, how many backups you keep at any given time, what regulations surrounding data backups in your region are, and so on.

5. Use offsite backup storage

We mentioned the importance of using multiple backup methods. You already know that your data could fall victim to hackers and internal threats. Something you may not have considered, however, is a physical threat. Using a mix of both local and offsite backups can protect your data from physical harm.

This could be a fire, electrical surge, faulty equipment, or something as simple as an employee spilling their coffee on a storage device. Having your data backed up to separate physical locations will prevent these sorts of mishaps from wreaking permanent damage to your data.

6. Take advantage of remote backups

Another useful best practice you can take advantage of is remote backups. Remote backups are conducted over the cloud rather than through a physical/wired connection.

Remote backups have become more popular as the cloud has made them easier to implement. And while they shouldn't be your only method of backing data up, they're a major convenience for your business. You can even partner with a backup provider who offers remote backups as a service.

7. Use a professional backup tool

And that brings us to the last best practice, which is using a professional backup tool to keep your data protected. Third-party tools will help keep your data safe with features and implementations that would be difficult to create otherwise.

JT offers just such a solution in the form of JT Cloud Backup. This service is compatible with most enterprise environments and enables your business to keep its data secured over the cloud.

Check that your data is secure this World Backup Day

Our FREE no obligation Cyber Assessment will assist you with creating a backup strategy to keep your business safe.

Over the last few years, cyber crimes have been at the forefront of every business owner’s mind. With a predicted damage cost of $10.5 trillion in just three years (Cybersecurity Ventures), there isn’t a sector, industry, or company that shouldn’t be concerned with the risks of cyberattacks.

That’s why conducting a cyber risk assessment periodically is so crucial. This post will cover the importance of a cyber risk assessment and how services like JT Cyber Assessment can help you stay a step ahead of cybercrime.

What is a cyber risk assessment?

A cyber risk assessment is a test or series of tests conducted on your current cybersecurity policies, procedures, and controls. This evaluation aims to spot vulnerabilities in your security posture before a malicious party does so you can bolster your controls.

Although you can (and should) conduct an internal cyber risk assessment, it’s recommended that you seek an outside service to test your policies as well. This way, you get the maximum amount of protection and don’t miss potential blind spots.

How secure is your business, and how can JT Cyber Assessment help?

The growing risk of cybercrimes over the last several years led JT to develop JT Cyber Assessment. It’s a state-of-the-art assessment service that can boost your cybersecurity policies as well as your company’s confidence in its policies.

JT's Cyber Assessment focuses on three key areas:

Understanding your organisation and risks

The first point JT Cyber Assessment pays attention to is analysing your organisation and its unique risks. No two organisations are exactly alike, and neither are the cyber threats they face.

JT looks at factors like external versus internal threats, how your sector impacts your likelihood of being targeted, whether or not you use a remote, hybrid, or traditional work structure, your networking and IoT practices, and more.

Reviewing your current security policies

Next, JT Cyber Assessment puts pressure on your current security policies.

This encompasses everything from complex network safeguards to the training you provide your staff on cybersecurity.

Your current policies are not only evaluated for vulnerabilities, but they’re also compared against the current best practices in your industry. This will give you an idea of where you stand among your peers and whether you’re an easy target for cybercrime.

Performing an in-depth analysis of your current cyber risk

Finally, JT Cyber Assessment analyses your present cyber risk. This is an in-depth procedure during which your cybersecurity systems are put to the test. The goal is to understand how well your current policies and systems will hold up under a real-world cybersecurity threat.

This is one of the most important tests that can be conducted on your system and is an excellent way to uncover vulnerabilities before a bad actor exploits them.

JT Cyber Assessment uses the ISO27001 framework and the ISO27002 supporting guidance

The ISO27001 framework is one of the most important ISMS frameworks ever developed, and it’s the one that JT Cyber Assessment uses to assess your cybersecurity systems and policies.

JT Cyber Assessment also uses the partnering ISO27002 supporting guidance, a set of guidelines used to better understand and implement the ISO27001 framework. Combined, these provide an excellent basis for understanding and improving your cybersecurity.

You can use other cyber risk assessment standards as well

Of course, not all organisations will want to use the ISO27001 framework, which is why JT Cyber Assessment offers a variety of cyber risk assessment standards. Below are a few of the other options businesses can choose from.

NIST Cybersecurity Framework (CSF) and NIST SP 800-53 (R5)

The NIST CSF is a set of guidelines that a business can use to assess, manage and reduce cyber risk. It divides your cybersecurity policies into tiers and identifies five business-critical operations that tie into your cybersecurity.

The JT Cyber Assessment uses the NIST CSF, along with the NIST SP 800-53 (Rev. 5) Security and Privacy Controls for Information Systems and Organizations to produce a more comprehensive review of your security posture.

CIS Critical Security Controls (CSC)

CSC is a modern set of cybersecurity practices. It provides recommendations for cybersecurity policies to put in place based on the current best practices and prevailing threats to organisations.

GDPR

For Europeans, GDPR is a set of regulations that companies must follow to secure their data and customers’ data. These are a great starting point for building your cybersecurity strategy and a must for remaining compliant.

PCI DSS

The PCI DSS cyber risk assessment framework for the payment card industry is a necessary realignment for how your business treats cybersecurity. This is one of the most high-risk industries, and as such, you need to take a unique approach.

Cybersecurity is no longer just about protecting your data and digital assets. Organisations also face the challenge of achieving compliance against information and cyber security frameworks. This can create additional pressure and technical needs that many businesses don’t have the resources to contend with.

At JT we understand that your data, is your business, and to ensure it remains that way businesses need to understand the importance of cybersecurity and cyber compliance -  read more below:

So, what is Cyber Compliance?

Cyber compliance is the practice of maintaining your cybersecurity policies, procedures and controls so that they meet a certain standard. Organisations already know that cybersecurity is a top priority, but implementing policies capable of keeping companies secure can be a lofty goal.

Governing bodies around the world are increasing their focus on security, with more now mandating a level of compliance against key information and cybersecurity frameworks.

Implementing a cyber compliance strategy simplifies this. It gives you a marker to aim for and creates consistency throughout your organisation.

Why is cyber compliance important?

Several factors make cyber compliance a critical strategy for any business. Here are just a few of the core reasons to invest in cyber compliance.

Ensure that sensitive information is kept safe

Cyber compliance ensures that your business keeps sensitive information safe. With data being such a valuable commodity, nearly all of your information could be considered “sensitive”, so why wouldn’t you want to protect it?

More specifically, the term “sensitive data” refers to data that belongs to your employees, customers, and your overall security, but can also include key operational information such as trade secrets, intellectual property and proprietary business strategies. Keeping this information secured is crucial to the success of your business and the safety of your stakeholders.

Regulations require that businesses follow cyber compliance

There are an ever-increasing number of cybersecurity rules worldwide. These regulations raise the bar for cyber compliance, forcing companies to do the same.

Regulations add a level of urgency to cyber compliance, as failure to comply could put your organisation in legal jeopardy. That said, regulations are not necessarily the final word on cyber compliance. For some organisations, they might only be the starting point.

Using cyber compliance protects your business against data breaches

Third, implementing cyber compliance will help your business stay guarded against data breaches. The average cost of a data breach in 2020 was $3.86 million, a 10% increase since 2014 (ibm.com). It’s not a stretch to think that this number will continue to rise as these breaches become more severe and frequent. 

Following cyber compliance will give you a higher level of protection against these breaches, sparing your business millions in damages and potentially years of recovery.

What are the challenges of cyber compliance?

Maintaining cyber compliance consistently in a global organisation is difficult

Cyber compliance comes with its own set of challenges. Not the least of which is maintaining consistency in a global organisation. If your business has locations and headquarters throughout the world, then you’ll be faced with the challenge of keeping up your standard across multi jurisdictions with variations in regulations which can be difficult.

External vendors can pose a risk to your business

External vendors and service providers can make your service more efficient. But they can also pose a risk.

These providers are privy to your data, and once it’s in their hands, your security is only as good as theirs. Your business must account for your internal security risks and the external risks presented by these vendors.

Keeping track of your cyber compliance can be complex

Keeping up with your cyber compliance is no easy task. The more cybersecurity policies you implement, the more policies must be audited, updated, and monitored. Internal reviews are essential, but if not carried out they can leave you vulnerable to blind spots in your evaluation methodology.