“You don’t have to run faster than the bear to get away. You just have to run faster than the guy next to you.”
― Jim Butcher
Recently we had the former White House Chief Information Security Officer (CISO) on our webinar talking about the Ukrainian war and its impact on us. It was a very interesting and scary discussion. If you couldn't attend live, Lisa can send you the recording link to watch.
In that discussion, I was reminded about an underlying truth of security. You will never achieve 100% perfection in your district's network security. No one will. However, you can, and want to, make sure that anyone attacking your district finds it painful, time-consuming, and simply not worth investing the time to compromise you. There are so many, better easier targets that they can explore.
If you were the CIA and they were Russia or China, they would be working on the "everything can be hacked" premise and it would be a battle. We have seen that around the world.
Our friends at Huntress have said that in many industries all remote sessions are recorded for legal purposes. They have seen video after video of an attacker breaching a network and hitting the simplest security barrier - a screensaver password, an MFA challenge - and giving up and disconnecting.
Do the right thing to the extent your budget and staff allow.
However, along the way make sure that you do everything possible to make yourself as unappetizing as possible to a would-be attacker.
Anyone that wanders in should quickly understand, "Nothing to see here. Move along."
We are here to help. Give us a call.
-Scott Quimby |
You must be logged in to post a comment.