Threats from Afar - Preparing for Potential Network Invasion

While tensions are high half a world away with the recent conflicts between Ukraine and Russia, threats about a different type of attack are currently impacting the U.S. In early February, the news was flooded with reports that the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) had issued warnings of potential cyberattacks on critical U.S. infrastructure in conjunction with the Ukrainian conflict. Even prior to the escalation, Citrin Cooperman’s cybersecurity professionals observed several attempted attacks of Russian origin starting from late January as the team was assisting a client with a potential incident. In light of these politically-influenced cyberattacks, Kevin Ricci, a partner in Citrin Cooperman’s Technology, Risk Advisory and Cybersecurity (TRAC) Practice, noted “I believe that future wars won't be fought using tanks and jets on a battlefield. Instead, they will be fought using keyboards and mice in cyberspace.”

The U.S. is constantly preparing its infrastructure for such attacks, but what can businesses do to protect themselves from such elevated risks? Here is a list of things companies should do in preparation for potential cyberattacks:

• Ensure all recent patches have been fully deployed on your network.
• Consider limited external network traffic to countries with whom you are currently doing business.
• If you have not done so recently, perform a vulnerability assessment and penetration test on your network and immediately correct any identified vulnerabilities.
• Update employee trainings related to current risks associated with cyberattacks, such as identifying phishing emails and potential signs of compromise.
• Report any suspicious network activity.

In times like this, company leadership needs to take these threats seriously, as these cyberattacks can severely damage business profitability and reputation. The c-suite needs to work in conjunction with their IT team and ensure a strategy is in place to protect their network and respond to potential attacks. If you need assistance in understanding the risks which may impact your company, or how to prepare your company for a potential attack, contact Michael Camacho at mcamacho@citrincooperman.com or Kevin Ricci at kricci@citrincooperman.com to set up a call.