Focus on external security is not enough. Cyber Security must assume that the infrastructure is already penetrated.
It is not uncommon that cybercriminals penetrate information infrastructure without actually weaponizing their access immediately. Advanced Persistent Threats (APT) very gradually increase their access and focus on staying undetected. Post Mortem analyzes after APT attacks show that it can take months or even more than a year between the initial breach and the actual attack.
When we focus our cybersecurity efforts on everything that might happen on the outside and ignore the “danger from within” by assuming that our infrastructure is safe and secure, we might be in for a big surprise. Focus on external security is not enough. Cyber Security must assume that the infrastructure is already penetrated!
Dr. ir Johannes Drooghaag – CEO Spearhead Management