First steps
Security transformation begins with methodical self-reflection.
Where am I now?
- Think about what the critical information to your organisation is, and where it is located.
- Identify how this critical information flows and through which platforms: PCs, laptops, mobile devices, cloud, servers, social networks.
- Guage what would happen if you were denied access to this information or if it were removed.
- Put an economic value on your critical information and your exclusive technology. This will serve to help you make a prospective budget for your security.
- Be aware of the risk involved and, if you are willing to mitigate such risk, allocate between 2% and 5% of this assigned value to your critical information and technology.
Where do I want to be?
- Identify and establish a gradation of information according to importance.
- Decide if it is necessary to update your security in general or only with regard to the flow of information.
- Visualise an ideal setting, taking into account the characteristics of your organisation.
How do I get to where I want to be?
- Consider your internal capacity to initiate a project strengthening your internal security, of which cyber security forms a part.
- Determine if you have the equity and control of intangibles to accomplish the undertaking of the project: funding, support from management, innovative spirit, the capacity to manage the change, sustainability.
- Consider if you need the help of a specialised company.
Latest news from ENISA
- Shaping Cybersecurity Policy towards a trusted and secure Europe
- Custom-made Awareness Raising to enhance Cybersecurity Culture
- Skills shortage and unpatched systems soar to high-ranking 2030 cyber threats
- New chapter begins as ENISA celebrates 20 years of strengthening cybersecurity
- Navigating through Challenges and Opportunities of Cybersecurity Standardisation