. THE CYBER THREAT LANDSCAPE RANSOM Be Safe Online is a handbook to help organisations enhance their cyber defence capabilities and digital risk management, so as to better protect themselves against the increasing frequency and sophistication of cyber-attacks. A successful attack is when a threat exploits and overcomes a vulnerability presented by people, process or technology. In November 2017, ride-sharing company Uber? revealed that personal details of 380,000 people in Singapore, including names, e-mail addresses and mobile phone numbers, were lost to cyber-attackers. Small and medium enterprises (SMEs) have not been spared either. In March 2017, BH Global, a local marine lighting company, had observed that its firewall had been blocking malicious “beacon messages” or “call-back messages” successfully. Increasingly, SMEs are being attacked and used as conduits to attack larger companies, organisations or even governments. Cyber-attackers range from criminals who steal online identities or corporate information for financial gain, hackers who break into systems just to show off their skills, to even nation states. Business risks arising from cyber incidents are wide ranging — from lawsuits and regulatory penalties due to theft of sensitive information, to loss of customer trust and damage to company reputations. Chief executives and senior managers can be blamed for serious cyber incidents. In late 2017, Uber’s chief security officer was forced to resign3 over his role in the company’s severe 2016 data breach. The most effective cyber defences will be those that concentrate resources on protecting their most valuable assets. 1. 380,000 Uber users hit in Singapore’s largest data breach, December 16, 2017, The Straits Times 2. Hit by cyber attacks, some Singapore enterprises are fighting back with Al, March 14, 2017, techgoondu.com 3. Uber Chief Security Officer fired after massive data-breach cover up, December 2017, hotforsecurity.bitdefender.com