[14 a Know Your P1307 \ cy Bila Loslal-4 And Updating PS ESSENTIAL 6 The integration of cybersecurity Py) Ute THe age)| measures can also give rise to cost-savings whilst maintaining effective cybersecurity. In order to simplify how organisations, especially Ue g Giving The i aaiae etl) ee yatta ETc Tas or} acl a SMEs, can defend themselves, CSA has identified 13 integrated cybersecurity measures, of which the top 6 are termed ‘Essentials’. Based on CSA’s view of the current cyber threat landscape, the 6 Essentials (see synopsis below) set out in this handbook are sufficiently effective in protecting any organisation against targeted attacks. Why? They help the organisation achieve a 20/20 vision, which allows defenders to thwart attackers. CSA also recognises that there is no silver bullet solution, thus the measures are designed to ensure coexistence. ESSENTIAL 1 Know Your Assets ESSENTIAL 4 To know your assets is to have identified and Giving The Right Admin ‘Passes’ Restrict administrator privileges so as not to give understood the cyber components of your attackers privileged rights to compromise systems. organisation. An inventory should be maintained to keep this knowledge current so as to prevent and ESSENTIAL 5 detect unauthorised access to those assets, thus Detect Breaches Promptly enabling effective response and recovery. Detect breaches as soon as possible by setting up continuous network monitoring with audit ESSENTIAL 2 Allow Only Authorised Software To Work trails/security log enabled for users and application activities, Implementing application control integrated with antivirus programs ensures that only authorised ESSENTIAL 6 software are at work. Access Control Ensure authorised access only, by implementing ESSENTIAL 3 Timely Patching And Updating Patch and update operating systems, firmware, and applications in a timely manner to reduce system-known vulnerabilities. This minimises exploitative attacks. multifactor authentication.