Develop ICT solution

Also referred to as information security, cybersecurity refers to the practice of ensuring the integrity, confidentiality, and availability (ICA) of information. Cybersecurity is comprised of an evolving set of tools, risk management approaches, technologies, training, and best practices designed to protect networks, devices, programs, and data from attacks or unauthorized access.

Traditional cybersecurity is cantered around the implementation of defensive measures around a defined perimeter. Recent enablement initiatives like remote workers and Bring Your Own Device (BYOD) policies have dissolved the perimeter, reduced visibility into cyber activity, and expanded the attack surface.

Today, breaches are increasing at a rapid pace despite record levels of security spending. Global organizations are turning to human-centric cybersecurity, a new approach that places focus on changes in user behaviour instead of an exponential number of growing threats. Founded on behaviour analytics, human-centric cybersecurity provides insight into how an end-user interacts with data and extends security controls into all the systems where data resides, even if not exclusively controlled by the organization. Ultimately, this approach is designed to identify behavioural anomalies in order to surface and prioritize the most serious threats, reducing investigation and threat detection times.

Good	Bad	Comment
Good Salaries	-	Approximately from 55k to 150k p/a.
Demand	-	More than 100,000 open positions worldwide today.
Mobility	-	Having core IT skills it's easier to move to another company.
Work Remote	-	Many companies now support working remotely or working from home.
Business Knowledge	-	Can lead to promotions or jobs in other parts of the company.
-	Tight Deadlines	Deadlines around IT projects can be critical to the success of the company.
-	Long Hours	If you work in IT support you will probably have to work long hours.
-	Dealing With Change	The IT business is constantly changing. You will need to adapt to that change.
-	Stress	Working with mission critical applications is a stressful job!
-	Burnout	Long hours and high stress levels can lead to burnout.

Why is cybersecurity important?

The world relies on technology more than ever before. As a result, digital data creation has surged. Today, businesses and governments store a great deal of that data on computers and transmit it across networks to other computers. Devices and their underlying systems have vulnerabilities that, when exploited, undermine the health and objectives of an organization.

A data breach can have a range of devastating consequences for any business. It can unravel a company`s reputation through the loss of consumer and partner trust. The loss of critical data, such as source files or intellectual property, can cost a company its competitive advantage. Going further, a data breach can impact corporate revenues due to non-compliance with data protection regulations. It`s estimated that, on average, a data breach costs an affected organization $3.6 million. With high-profile data breaches making media headlines, it`s essential that organizations adopt and implement a strong cybersecurity approach.

Common types of cybersecurity

Network Security protects network traffic by controlling incoming and outgoing connections to prevent threats from entering or spreading on the network.

Data Loss Prevention (DLP) protects data by focusing on the location, classification and monitoring of information at rest, in use and in motion.

Cloud Security provides protection for data used in cloud-based services and applications.

Intrusion Detection Systems (IDS) or Intrusion Prevention Systems (IPS) work to identify potentially hostile cyber activity.

Identity and Access Management (IAM) use authentication services to limit and track employee access to protect internal systems from malicious entities.

Encryption is the process of encoding data to render it unintelligible and is often used during data transfer to prevent theft in transit.

Antivirus/anti-malware solutions scan computer systems for known threats. Modern solutions are even able to detect previously unknown threats based on their behaviour.

Types of Malware

Virus

Possibly the most common type of malware, viruses attach their malicious code to clean code and wait for an unsuspecting user or an automated process to execute them. Like a biological virus, they can spread quickly and widely, causing damage to the core functionality of systems, corrupting files and locking users out of their computers. They are usually contained within an executable file.

Worms

Worms get their name from the way they infect systems. Starting from one infected machine, they weave their way through the network, connecting to consecutive machines in order to continue the spread of infection. This type of malware can infect entire networks of devices very quickly.

Spyware

Spyware, as its name suggests, is designed to spy on what a user is doing. Hiding in the background on a computer, this type of malware will collect information without the user knowing, such as credit card details, passwords and other sensitive information.

Trojans

Just like Greek soldiers hid in a giant horse to deliver their attack, this type of malware hides within or disguises itself as legitimate software. Acting discretely, it will breach security by creating backdoors that give other malware variants easy access.

Ransomware

Also known as scareware, ransomware comes with a heavy price. Able to lockdown networks and lock out users until a ransom is paid, ransomware has targeted some of the biggest organizations in the world today — with expensive results.

Ransomware

Ransomware is malicious software with one aim in mind: to extort money from its victims. It's one of the most prolific criminal business models in existence today, mostly thanks to the multimillion-dollar ransoms criminals demand from individuals and corporations. These demands are very simple: pay the ransom or have your operations severely compromised or shut down completely.

Very often, the first an organization knows of an attack is when they receive an on-screen notification informing them that data on their network has been encrypted and will be inaccessible until the ransom has been paid. Only on payment will they be given the decryption key to access their data. Failure to pay could result in the key being destroyed, rendering the data inaccessible forever.

Types of Phishing Attacks

Some specific types of phishing scams use more targeted methods to attack certain individuals or organizations.

Spear Fishing

Spear phishing email messages won`t look as random as more general phishing attempts. Attackers will often gather information about their targets to fill emails with more authentic context. Some attackers even hijack business email communications and create highly customized messages.

Clone Phishing

Attackers are able to view legitimate, previously delivered email messages, make a nearly identical copy of it—or “clone”—and then change an attachment or link to something malicious.

Whaling

Whaling specifically targets high profile and/or senior executives in an organization. The content of a whaling attempt will often present as a legal communication or other high-level executive business.

Social Engineering

Social engineering is a type of manipulation that coaxes someone into giving up confidential information such as a social security number or building access codes. Social engineering, in the world of information security, is a type of cyber-attack that works to get the better of people through trickery and deception rather than technological exploits. These attacks take advantage of human vulnerabilities such as emotions, trust or habit in order to convince individuals to take action such as clicking a fraudulent link or visiting a malicious website. Though less sophisticated than other cyber-attack strategies, social engineering can have severe consequences and often can be the attacker's foot in the door for a major attack.