Guidance

Industry preparedness

Published 25 November 2015

This guidance was withdrawn on 15 May 2020

This information is contained within the Crowded Places guidance

1. Business and industry protect your assets

Wednesday sees the focus of CT Awareness Week 2015 shift to businesses and industry and what they can do to make themselves more resistant to the online threat.

Recent attacks, which you may have seen in the media, illustrate how there is still work to be done in the battle to protect businesses and industry from online attacks.

Developments in technology such as new mobile devices, cloud computing and new software applications mean that the online threat is ever evolving. Businesses and industry must take steps to protect themselves and stay safe.

2. Discuss online extremism with police experts

Police experts will be taking part in a web-chat today to help industry and business prepare for the threat from online extremism. The web-chat will take place from 11.30 am.

Join the conversation: @Policechiefs#CounterTerrorismUK

3. Protect your organisation from online attack

Danny Lawrence, a police expert on internet security said:

Recent incidents in the media remind us of the online threat faced by industry and its impact on businesses and the community.

Now is the time for businesses of all sizes to review the security measures they have in place to protect themselves from threats online. By taking a few simple steps and keeping up to date with the latest issues, businesses can make a real difference and reduce the chances of an online security breach.

I would encourage all areas of business and industry to join our web-chat today so that we can discuss the latest concerns and issues that will help to improve this issue for everyone. By working together and helping each other, businesses can develop and make use of the most effective measures to increase their online security.

4. Build resilience to all types of online attacks

The introduction of technologies such as mobile devices, cloud computing and rapid availability of software applications means that there is no longer one term to define an online security threat.

The terms below refer to types of online threats, open the link to find examples of real life cases which will explain their meanings.

• Spear Phishing

• Known Vulnerability Exploitation

• Application Layer Attack

• Bruteforce Attack

• Zero Day Exploitation

• Watering Hole Attack

• Phishing for Credentials

• DDoS Attack

• Phishing with Malware

• Rogue Update Attack

• Network Protocol Attack

5. Government provides toolkits to assist business and industry to counter cyber threats

A number of government backed schemes help organisations protect themselves against these attacks.

Cyber Essentials is backed by industry including the Federation of Small Businesses and a number of insurance organisations that offer incentives for businesses participating in the scheme.

The UK Government has developed the 10 Steps to Cyber Security to help businesses protect themselves online.
The advice covers the following subject areas:

• Information Risk Management Regime

• Secure configuration

• Network security

• Managing user privileges

• User education and awareness

• Incident management

• Malware prevention

• Monitoring

Businesses with good cyber security practices can use their participation in the scheme to show they take online security seriously.

The Information Security Breaches Survey 2014, commissioned by the Department for Business, Innovation and Skills (BIS) and carried out by PwC, found that 81% of large organisations suffered a security breach, down from 86% a year ago. 60% of small businesses reported a breach, down from 64% in 2013.

6. Free online course to protect your digital environment

The Open University runs a free online courseto help people understand online security and protect their digital life, whether at home or work.

It may be nothing, but if you see or hear anything that could be terrorist-related trust your instincts and call the Anti-Terrorist Hotline on 0800 789 321.