Skip to main content
Guidance

Disruptive cyber attacks – reducing their impact, reducing the risk

How to recover your organisation, be better prepared for future incidents and make them less likely.

Page 12 of 16

1. Identifying critical systems, services and data

You cannot defend your systems effectively without understanding what you have. Gaps in visibility can become entry points for attackers or allow them to operate undetected. You should build a clear picture of your systems, services and data to identify where weaknesses may exist, allowing you to respond more quickly to emerging risks.

Attackers often focus on specific high-value targets that allow them to maximise disruption. These typically include:

  • high privilege accounts
  • identity and access management systems such as Active Directory
  • backup systems
  • systems underpinning essential functions

Published

Reviewed