Guidance
Disruptive cyber attacks – reducing their impact, reducing the risk
How to recover your organisation, be better prepared for future incidents and make them less likely.
Pages
Page 12 of 16
1. Identifying critical systems, services and data
You cannot defend your systems effectively without understanding what you have. Gaps in visibility can become entry points for attackers or allow them to operate undetected. You should build a clear picture of your systems, services and data to identify where weaknesses may exist, allowing you to respond more quickly to emerging risks.
Attackers often focus on specific high-value targets that allow them to maximise disruption. These typically include:
- high privilege accounts
- identity and access management systems such as Active Directory
- backup systems
- systems underpinning essential functions