ADDITIONAL MEASURES The six essentials, when implemented correctly, will keep your systems and networks safe. Organisations can consider implementing seven more Measures outlined below, such as encryption, to meet additional business needs. More details on these measures can be found at https://www.csa.gov.sg/gosafeonline. 1. ENCRYPT ‘CROWN JEWELS’ Once the crown jewels are identified, organisations will understand the cost of attacks. Encryption can be used to protect the crown jewels like customer data from unauthorised disclosure. 2. HARDEN DEVICE CONFIGURATIONS Devices can be secured by reducing its surface of vulnerability. Essentially, any service, function or application not needed to support a business can be removed and disabled. Such ‘hardening’ efforts help organisations reduce their attack surface, making it difficult for attackers to gain entry. 3. DEFEND NETWORK PERIMETERS To prevent network breaches and intrusions, organisations can implement network-based intrusion detection/prevention systems to detect/prevent cyber intrusions. Such systems recognise abnormal traffic patterns or spikes in network movements, which may indicate that data is being transferred out illegally.