Ukuphepha kwe-inthanethi kwebhizinisi: izingozi, izinsika kanye nemikhuba emihle kakhulu

La ukuphepha kwe-inthanethi kwebhizinisi Sekuyinye yezinsika ezibalulekile zokuqhubeka kwanoma yiliphi ibhizinisi, kusukela ezinkampanini ezinkulu kuya kuma-SME amancane kakhulu. Kuningi kakhulu izinsizakalo zefuAmadivayisi axhunyiwe kakhulu kanye nedatha ebaluleke kakhulu ejikeleza kumanethiwekhi isho amathuba amaningi kubahlaseli. Ukuba "ne-antivirus kanye ne-firewall" akusanele: kudingeka indlela ephelele yokuhlanganisa ubuchwepheshe, izinqubo, kanye nabantu.

Ngaphezu kokusebenzisa amathuluzi athuthukile, izinhlangano zidinga phatha ubungozi ngendlela efaneleUkuhambisana nemithethonqubo eqinile futhi uhlakulele isiko langaphakathi lapho ukuphepha kwe-inthanethi kungumthwalo wemfanelo wawo wonke umuntu, hhayi nje womnyango we-IT. Kuyo yonke le ndatshana, uzobona ukuthi ukuphathwa kwezingozi, ukwakheka kobuchwepheshe, ukuqeqeshwa, imikhuba emihle, kanye nokusabela ezigamekweni kuhlangana kanjani nesu eliqinile lokuphepha kwe-inthanethi kwenkampani.

Ukuphathwa kwezingozi kanye nokuphepha kwe-inthanethi enkampanini

Ezweni lebhizinisi, ukuphathwa kwezingozi kanye nokuphepha kwe-inthanethi Ziyahambisana, kodwa azifani ncamashi. Ukuphathwa kwezingozi zenkampani kugxila ekuboneni ukuthi yiziphi izimpahla ezingase zihlaselwe (idatha, izinhlelo zokusebenza, ingqalasizinda, abaphakeli, abantu) nokuhlola umthelela ongaba khona uma kukhona okungahambi kahle. Ukuphepha kwe-inthanethi kuyingxenye yalolo hlaka olubanzi, oluhlanganisa isethi yezinyathelo zobuchwepheshe nezenhlangano ezisetshenziswayo ukunciphisa lezo zingozi.

Ukunciphisa izinsongo kugxile ku ukuvimba izingozi ezithile esizazi kakade (i-malware, i-ransomware, i-phishing, ukuhlaselwa kwe-DDoS, njll.), kuyilapho ukuphathwa kwengozi kubheka isithombe esikhulu: indlela yokunciphisa amathuba kanye nomthelela ojwayelekile wanoma yisiphi isigameko sobuchwepheshe. Yilapho amazinga kanye nezinhlaka zomthetho ziqala khona ukusebenza, ezidinga incazelo yezilawuli, izinqubo zokubuyekeza, kanye nezikhathi zokuphendula.

Ukuze zibeke phambili izinto ngendlela efanele, izinkampani eziningi zisebenzisa amamephu okushisa kwengozi ababhekisela ngqo emathubeni okuba khona kwesigameko kanye nomonakalo ongase ube khona ebhizinisini. Lokhu kubavumela ukuthi babone ukuthi yiziphi izindawo zenethiwekhi, yiziphi izinhlelo zokusebenza, noma yiziphi izinqubo ezibaluleke kakhulu nokuthi batshale kuphi kuqala, kungaba ekuphepheni kwemingcele, ekuvikelweni kwe-endpoint, ekuqeqeshweni, noma ukuthuthukiswa kwesipele.

Ngemva kokuhlonza izingozi ezibalulekile, kuklanywa uhlelo uhlelo lokusebenza olunemininingwane Lokhu kunquma ukuthi yiziphi ubuchwepheshe nezinqubo ezizosetshenziswa. Kungasukela ekuhlukaniseni inethiwekhi noma ekusebenziseni ukuqinisekiswa kwezinto eziningi kuya ekusebenziseni ama-honeypots ukuheha nokufunda ukuziphatha kwabahlaseli. Ngezinye izikhathi, uma izindleko zokunciphisa zidlula umonakalo ongaba khona, inhlangano inquma ukwamukela izingozi ezithile ezisele, njalo ibhala phansi futhi iqaphe lesi sinqumo.

Ubuhlakani bokwenziwa kanye nokufunda komshini sekube ngabalingani abavamile kulezi zinhlelo. Izinhlelo ezisekelwe ku-AI Bahlaziya amarekhodi amaningi ngesikhathi sangempela, bathola ukuziphatha okungajwayelekile, bathole izinsongo eziqhubekayo eziqhubekayo, futhi basize ekunciphiseni imiphumela emibi engamanga. Kodwa-ke, basadinga abahlaziyi abangabantu ukuqinisekisa izexwayiso, bathuthukise amamodeli, futhi benze izinqumo zebhizinisi. I-Microsoft Security Copilot kanye namanxusa e-AI Lezi yizibonelo zendlela i-AI ehlanganiswe ngayo emisebenzini yokuthola nokuphendula.

Ekugcineni, kokubili ukuphathwa kwezingozi kanye nokuphepha kolwazi kuhlose umgomo ofanayo: vikela ubuqotho, ubumfihlo kanye nokutholakala kwemininingwane nezinsizakalo zenkampani. Ukuqaliswa kokulawula okungaphumelelanga kungashiya izimbobo ezingabonakali eziphetha ngokwephulwa kwedatha okubizayo, futhi esimweni esibi kakhulu, ukuvalwa kwebhizinisi.

Kuyini ukuphepha kwe-cyber ebhizinisini futhi kungani kubaluleke kangaka?

Singakwazi ukuqonda ukuphepha kwe-inthanethi kwebhizinisi njengeqoqo lezinqubo, amathuluzi kanye nezinqubomgomo ezenzelwe ukuvikela zonke izimpahla zobuchwepheshe zenhlangano: amanethiwekhi, amaseva, izindawo zokusebenza, izinsizakalo zamafu, izinhlelo zokusebenza, ama-API, amadivayisi eselula kanye ne-IoT, kanye nolwazi abalugcinayo futhi abalucubungulayo.

Ezindaweni eziyinkimbinkimbi—izikhungo zedatha zangaphakathi, amafu omphakathi amaningi, amahhovisi akude, ukusebenza ngocingo—ukuphepha kudinga ukuqapha okuqhubekayo, ukuzenzekela, kanye nokubonakalaAsisakhulumi ngokubeka i-firewall emnyango kanye nesofthiwe ye-antivirus ku-PC ngayinye, kodwa mayelana nokuhlanganisa ukuphathwa kobunikazi kanye nokufinyelela, ukubethela idatha, ukuqapha ngesikhathi sangempela, impendulo yezehlakalo, kanye nokuhambisana nemithetho esu elihlanganisiwe, elivame ukusekelwa yisikhungo semisebenzi yezokuphepha (i-SOC).

Umthelela wezomnotho wesigameko esingathi sína mkhulu kakhulu: ukwephulwa kwedatha okubize izigidiUkuphazamiseka kwezinsizakalo, amacala, izinhlawulo zomthetho, kanye nokulimala kwedumela. Njengoba ingqalasizinda ikhula (izindawo eziningi, izicelo eziningi, izindawo zokugcina eziningi), noma yikuphi ukunganakwa kwandisa imiphumela yako, ikakhulukazi emikhakheni elawulwa kakhulu njengokunakekelwa kwempilo noma ezezimali.

Ukuphepha kwe-inthanethi kwebhizinisi kubalulekile vikela izimpahla ezinenani eliphezulu njengempahla yobuhlakani, ulwazi lwamakhasimende, izinhlelo zebhizinisi, noma ucwaningo lwemakethe. Ukwephulwa kwemithetho kungavuza izimfihlo zokuhweba, kubangele ukwehla kwamakhasimende, futhi kuqede ukwethenjwa kwabalingani kanye nabatshalizimali. Yingakho kusetshenziswa izakhiwo ezijulile zokuzivikela, ezihlanganisa ukutholwa kokungena, ukuhlukaniswa, ukubethela, izilawuli zokufinyelela, kanye nokuqapha.

Ukuthobela imithethonqubo (GDPR, HIPAA, PCI DSS kanye neminye) kunezela olunye ungqimba lwengcindezi. Ukwehluleka ukulandela le mithetho Lokhu kungaholela ezijezisweni zezimali, imikhawulo yokusebenza, kanye nomonakalo wedumela. Ukuhlanganisa ukuskena kobuthakathaka, amalogi, kanye nemijikelezo yokulungisa amamojula okuthobela imithetho kanye namathuluzi e-GRC (Governance, Risk, and Compliance) kwenza kube lula ukuhlolwa kwamabhuku futhi kukhulula isikhathi sabasebenzi.

Ngaphezu kwalokho, ukuphepha okuhle kwe-inthanethi kukhuthaza ukukhuliswa kwebhizinisiUma kuvulwa amahhovisi amasha, kuthengwa izinkampani, noma kuqaliswa imigqa emisha yedijithali, ukwakheka kokuphepha okuqhubekayo kuvumela lezi zinguquko ukuthi zifakwe ngaphandle kokudala iminyango yangemuva yabahlaseli. Lokhu kubaluleke kakhulu kumaphrojekthi okufuduka kwamafu noma ukwamukelwa kwezinsizakalo ezincane.

Okokugcina, ukuphepha kwebhizinisi okuphumelelayo kusiza phula ama-silo angaphakathiI-IT ayiyona kuphela enesibopho sokuphepha: izindawo ezifana nentuthuko, ezomthetho, ukumaketha, imisebenzi, kanye nezinsizakusebenza zabantu kumele zihambisane. Ukuhlanganisa ukuphepha emjikelezweni wokuphila kwentuthuko (i-DevSecOps), ukuqeqesha abasebenzisi, ukuchaza izinqubomgomo ezicacile, kanye nokubuyekeza njalo ukumiswa konke kunegalelo ekudaleni isiko langempela lokuphepha kwe-cyber.

Izinsika eziyisisekelo zokuphepha kwe-inthanethi ebhizinisini

Isu eliqinile alincikile esixazululweni esisodwa esiyisimangaliso, kodwa emabhulokini amaningana aqinisanayo. Izinsika eziyisisekelo Okulandelayo yizinkinga ezivame ukuvela kunoma iyiphi inkampani enekhono lokuphepha kwe-inthanethi elivuthiwe:

Ukuphathwa kobunikazi nokufinyelela (IAM). Ukulawula ukuthi ubani ongafinyelela kuziphi izinsiza kanye namalungelo angakanani abalulekile. Indlela evamile ukusebenzisa isimiso selungelo elincane, ukuqinisekiswa kwezinto eziningi (i-MFA), kanye nokunikezwa okuzenzakalelayo kanye nokususwa kokunikezwa kwabasebenzisi ngokusekelwe ezinqubweni ze-HR (ukuqashwa okusha, ukuqedwa, izinguquko zomsebenzi). Ukuhlanganisa ukuphathwa kobunikazi nokuqapha imicimbi kunciphisa inani lamaphuzu okungena atholakala kumhlaseli.

Ukuhlukaniswa kwenethiwekhi. Ukuhlukanisa inethiwekhi yangaphakathi ibe yizingxenye noma izigaba ezincane kuvimbela umhlaseli ukuthi ahambe ngokukhululeka, noma ngabe angena ohlangothini olulodwa. Yilapho ama-VLAN, ama-firewall angaphakathi, kanye nezinhlaka zezigaba ezincane zisebenza khona; ngaphezu kwalokho, ukuba imishini yenethiwekhi Izinyathelo zokuphepha ezifanele ziyisihluthulelo ekusebenziseni izinqubomgomo ezisebenzayo. Ukuhlukanisa izindawo zokuthuthukisa, zokuhlola, kanye nezokukhiqiza kuvimbela iseva yokuhlola engavikelekile kahle ekubeni yindawo yokungena ezinhlelweni ezibalulekile.

I-Endpoint kanye nokuphepha kwedivayisi. Yonke i-laptop, idivayisi yeselula, iseva, noma isitsha kungaba yisixhumanisi esibuthakathaka. Izixazululo ze-EDR ne-XDR ziqoqa i-telemetry kusuka kuma-endpoints, zithole ukuziphatha okusolisayo (ukubethela amafayela amaningi, ukufakwa kwememori, ukuxhumana okungavamile), futhi zingakwazi hlukanisa imishini eyonakeleEzindaweni zezitsha zesikhashana, ukuhlanganisa ukuhlaziywa kokuphepha kumbhobho we-CI/CD kuyisihluthulelo sokugwema izikhala.

Ukubethela kanye nokufihla idatha. Ukubethela ngesikhathi sokuphumula kanye nokuthuthwa kuqinisekisa ukuthi, uma othile eba idatha, Angikwazi ukuzisebenzisa kalulaEzinye izinhlangano zisebenzisa i-tokenization yezinkambu ezibucayi (isb., amakhadi esikweletu), ukuze izinhlelo zangaphakathi ziphathe ama-token esikhundleni sedatha yangempela. Lokhu kunciphisa umthelela wokwephulwa kwedatha futhi kusiza ukuhambisana nemithethonqubo yobumfihlo. Ezimweni eziningi, ukuqonda Umehluko phakathi kwe-TPM ne-fTPM Kuwusizo ekuklameni izixazululo zokubethela zehadiwe ezinokwethenjelwa.

Ukuqapha kanye nokuphendula kwezehlakalo. Ngisho noma kukhona ukulawula okuhle, imizamo yokungena isazoqhubeka. Kubalulekile ukuba ne- ukuqapha okuqhubekayo kanye nohlelo lokuphendula: Khomba imisebenzi engavamile, sebenzisa ukugeleza kokulawula (ukuvimba iziqinisekiso, ukuhlukanisa imishini, ukuvala ukufinyelela okuthile) bese ubhala phansi futhi ufunde esigamekweni ngasinye ukuze uthuthukise izinqubo kanye nokucushwa.

Izinsongo ezivamile ezinhlelweni zamakhompyutha ezinkampani

Izinkampani zisebenza endaweni lapho inani kanye nobuchwepheshe bokuhlaselwa kukhula khona. Ukwanda kokuhlasela—ukusebenza kude, i-SaaS, amadivayisi omuntu siqu—kwenza impilo ibe lula kubagebengu be-inthanethi. Ezinye zezinsongo ezivame kakhulu Yilezi:

I-Ransomware kanye nezinye izinhlelo ze-malware. I-Ransomware ibhala ngemfihlo amafayela enhlangano futhi ifune isihlengo ukuze akhululwe. Ezinye izinhlobo ze-malware zingantshontsha iziqinisekiso, zihlole umsebenzi, noma zisebenzise izinsiza zangaphakathi ngezinye izinjongo (njengokumba imali yedijithali). Uma ikhodi enonya isakazeka kusuka kukhompyutha eyodwa iye kunethiwekhi yonke, ingalimaza amafektri, izibhedlela, noma yonke izinsiza zomphakathi.

Ubugebengu bokweba imininingwane ebucayi kanye nokwebiwa kobunikazi. Ngama-imeyili, imiyalezo ye-SMS, noma okuthunyelwe ezinkundleni zokuxhumana, abahlaseli bazama ukukhohlisa abantu ukuthi bachofoze izixhumanisi ezinonya noma baveze iziqinisekiso zabo. Eminingi yale miyalezo yenziwe kahle kakhulu, isebenzisa ulwazi olutholakala emphakathini oluvela ezinkundleni zokuxhumana noma ukuvuza kwangaphambilini. Inhlanganisela yokuqeqeshwa kwabasebenzisi, izihlungi ze-imeyili, kanye ne-MFA kunciphisa kakhulu ukusebenza kwazo, kodwa ukunganakwa okukodwa Kungavula umnyango wokwephulwa okukhulu.

Izinsongo zangaphakathi. Umhlaseli akaveli njalo ngaphandle. Izisebenzi ezinganelisekile, ukunganaki, ukuphathwa kabi kwezimvume, noma ama-akhawunti ayizintandane konke kungaholela ekufinyeleleni okungagunyaziwe. Amamodeli afana ne- zero trustUkuqapha imisebenzi ebucayi nokubuyekeza izimvume njalo kusiza ukunciphisa lokho okungenziwa yinoma yimuphi umsebenzisi wangaphakathi, kunciphisa ukulimala okungenzeka.

Ubuthakathaka ochungechungeni lokuhlinzeka ngempahla. Umthengisi wesofthiwe osengozini, isevisi yamafu, noma umtapo wolwazi weqembu lesithathu angasebenza njengehhashi leTrojan. Izehlakalo zalolu hlobo zithinte izinkulungwane zezinhlangano ngesikhathi esisodwa. Yingakho abathengisi besofthiwe bebuyekezwa, ukufinyelela kweqembu lesithathu kuvinjelwe, futhi imikhuba yokuphepha ihlolwa njalo ngemibuzo kanye nokuhlolwa. Bona ukuthi kanjani yeka ukuhlaselwa kwe-supply chain Inikeza izinyathelo ezisebenzayo zokunciphisa le ngozi.

Ukuhlaselwa kwe-Denial of service (DDoS). Ukusebenzisa ama-botnet, abahlaseli bagcwalisa amaseva noma izinhlelo zokusebenza ngethrafikhi, okwenza zingasebenzi. Ebhizinisini le-e-commerce, esikhungweni sezezimali, noma esikhungweni sezempilo, ukungasebenzi amahora amaningi kungaba yinhlekelele. Amasu anjengokuhlanza ithrafikhi, ukukhawulela amazinga, kanye nokusebenzisa amanethiwekhi okulethwa kokuqukethwe kusiza ekumunceni noma ekuguquleni lokhu kuhlaselwa; ngaphezu kwalokho, izixazululo ezisekelwe ku-DNS ezifana I-OpenDNS Zisiza ekuhlungeni nasekunciphiseni ithrafikhi enonya.

Ukwakhiwa kwezakhiwo kanye nezinto ezibalulekile zokuphepha kwe-inthanethi kwebhizinisi

Ukuklama isakhiwo sokuphepha esisebenzayo kuhilela ukuhlanganisa i-hardware, isofthiwe, kanye nezinqubo zokuphatha. Akukhona nje ukuthenga amathuluzikodwa kunalokho ukuhlela ngokuhambisanayo. Izingxenye ezibalulekile zifaka:

Ukuvikela inethiwekhi kanye nomngcele. Nakuba umqondo wendabuko we-perimeter uyancipha kakhulu ngefu kanye nomsebenzi osebenza kude, ama-firewall, izinhlelo zokuvimbela ukungena (i-IPS), kanye namasango avikelekile ayaqhubeka nokudlala indima ebalulekile. Bahlaziya ithrafikhi, bavimbe amaphethini anonya, futhi baphoqelele izinqubomgomo ezihlanganisiwe kuzo zonke izingxenye zenethiwekhi, amasayithi, kanye nezindawo ezisezindaweni kanye nezindawo zamafu.

Ukutholwa kanye nokuphendula kwe-Endpoint (EDR). Amathuluzi e-EDR aqoqa ngesikhathi sangempela okwenzekayo kudivayisi ngayinye: izinqubo, ukuxhumana, izinguquko zefayela. Ikhono layo lokuhlukanisa ngokushesha umninikhaya Izinsongo ezisolisayo zinciphisa ukusabalala kwazo. Zihlanganiswe nobuhlakani bezinsongo zangaphandle kanye namapulatifomu okuqondisa, zivumela izimpendulo ezizenzakalelayo nezisebenzayo.

I-IAM kanye nokulawulwa kwamalungelo. Ukuphathwa kobunikazi kanye nokufinyelela kuyinhlanganisela ehlanganisa abasebenzisi, izinhlelo zokusebenza, kanye nedatha ndawonye. Izinyathelo ezifana nokungena ngemvume okukodwa (i-SSO), i-MFA, ukubuyekezwa kwemvume ejwayelekile, kanye nokwenyuswa kwamalungelo ngesikhathi esifanele kwenza kube nzima kakhulu kunoma yimuphi umhlaseli okwazi ukweba iziqinisekiso.

Ukubethela, i-DLP kanye nokuvikelwa kwedatha. Ngaphezu kokubethela, izinhlangano eziningi zisebenzisa izixazululo ze- ukuvimbela ukulahleka kwedatha (i-DLP) Baqapha ama-imeyili, ukulayishwa kwewebhu, ukusetshenziswa kwedivayisi ye-USB, kanye nezinye iziteshi eziphumayo. Umgomo ukuthola nokuvimba ukudluliselwa okungagunyaziwe kolwazi olubucayi, kungaba ngenxa yephutha lomuntu noma ukuhlaselwa.

I-SIEM, i-XDR kanye nokuhlelwa kabusha. Amapulatifomu olwazi lokuphepha kanye nokuphathwa kwemicimbi (i-SIEM) kanye nezixazululo ze-XDR zihlanganisa amalogi avela kumaseva, ama-endpoints, izinhlelo zokusebenza, izinsizakalo zamafu, amadivayisi enethiwekhi, njll. Ngalokhu kubonakala, ahlobanisa imicimbi ebonakala ingenangozi kanye Baveza amaphethini okuhlasela. lokho bekungeke kuqashelwe uma kubukwa ngokwehlukana. Ukuhlelwa kabusha kuvumela futhi ukusetshenziswa kwezimpendulo ezenzakalelayo eziqondiswa imithetho ngisho neziqhutshwa yi-AI; ukugcwalisa la makhono kungamathuluzi okusebenza ukuphathwa kokuma kokuphepha kohlelo lokusebenza Zengeza umongo mayelana nokuvezwa kwezinsizakalo nama-API.

Izidingo zokuphepha ezibalulekile zezindawo zesimanje ze-IT

Ukugxuma kusuka kumanethiwekhi amancane, avaliwe kuya i-ecosystems esakazekile, ehlanganisiwe, kanye neyamafu amaningi Lokhu kuphoqa ukuthi kucatshangelwe kabusha izinto eziza kuqala kwezokuphepha. Ezinye izidingo ezibalulekile namuhla yilezi:

Ukubonakala kwempahla okugcwele. Awukwazi ukuvikela lokho ongakwazi. Kubalulekile ukuba nezinqolobane zamaseva, izitsha, izinhlelo zokusebenza, amadivayisi eselula, i-IoT, kanye nezinsizakalo ze-SaaS ezizenzakalelayo. Izindlela zokuthola ezizenzakalelayo kanye nokuskena okuphindaphindiwe kuvimbela "iziqhingi" noma izinhlelo zesithunzi ukuthi zingabonakali ngaphandle kwe-radar ye-IT.

Ukubeka phambili izinto ngokusekelwe engcupheni. Akuzona zonke izinkinga eziphuthumayo ngokulinganayo. Ukuhlola ubucayi ngokusekelwe emthonjeni webhizinisi, ukuxhashazwa kalula, kanye nokuvezwa (isibonelo, ukuthi isevisi iyatholakala yini emphakathini) kukuvumela ukuthi ugxile emizamweni lapho ibaluleke khona ngempela. Ukuhlanganisa izikena zobuthakathaka kanye nobuhlakani bosongo kunikeza umongo obalulekile.

Imodeli yokuthembana engekho. Ukucabanga ukuthi inethiwekhi yangaphakathi ingase ibe sengozini kuholela ekudingeni ukuqinisekiswa okuqhubekayo kwabasebenzisi namadivayisi kuzo zonke izindawo zokufinyelela. Lokhu kuhunyushwa ngokuthi ukuhlukaniswa okuncane, i-MFA, izinqubomgomo zamalungelo amancane kanye nokusetshenziswa kwamathokheni esikhashana. Umqondo uwukuthi, noma ngabe umuntu ungena, ngeke akwazi ukuhamba ngokukhululeka noma ukuqoqa amalungelo.

Ukuqapha nokuphendula njalo. Ukutholwa kwezindawo akusanele. Izinhlelo ze-SIEM noma ze-XDR zidinga ukuphakelwa ngamalogi esikhathi sangempela, kudingeka imithetho yokuxhumana ehlelwe kahle, futhi kumele kwenziwe izinqubo zokuphendula ezigamekweni. Ukuziqeqesha njalo kanye nokuzivocavoca kwetafula kusiza ithimba ukuthi likwazi ukuthi lenzeni uma kuqalwa isexwayiso esibucayi.

Ukuhambisana nokuthobela imithetho kanye nokuphatha. Imithetho eminingi ibeka isikhathi esiphezulu sokubika izehlakalo, ukusebenzisa ama-patches, noma ukugcina ama-log. Ukuhlanganisa lezi zidingo kumathuluzi okuphepha kanye nokusebenza kwe-IT kuqinisekisa ukuthi izibopho zomthetho ziyagcwaliseka ngaphandle kokuthembela ezikhumbuzweni ezenziwe ngesandla. Amapulatifomu e-GRC enza kube lula ukudweba ubudlelwano phakathi kwezingozi, izilawuli, kanye nobufakazi bokuthobela imithetho.

Amasu okuphepha kwe-inthanethi ezinkampanini athuthukisiwe

Ngaphezu kwezisekelo, kunezindlela nemikhuba evumela ukuphepha kwe-inthanethi kwebhizinisi ukuthi kuthathwe kufinyelele ezingeni eliphakeme, ikakhulukazi ezinhlanganweni ezivuthiwe kakhulu noma ezinesidingo esibucayi.

Ukuhlukaniswa okuncane. Ukuthatha isinyathelo esengeziwe sokuhlukanisa, ngokuhlukanisa izinhlelo zokusebenza, ama-microservices, noma ngisho nemisebenzi yomuntu ngamunye, kunciphisa kakhulu amathuba okunyakaza eceleni ngumhlaseli. Izinqubomgomo zokufinyelela zichazwa ezingeni eliyindilinga kakhulu, ngokusekelwe kubunikazi, uhlobo lwesevisi, noma imethadatha yomsebenzi.

Ukuphathwa kokufinyelela okunelungelo (i-PAM). Ama-akhawunti anamalungelo okuphatha ayinhloso ekhangayo kakhulu. Izixazululo ze-PAM ziqondisa ukusetshenziswa kwazo ndawonye futhi zilawule. ukunciphisa isikhathi abahlala bephakanyisiweLokhu kuhilela ukuloba amaseshini kanye nokushintshanisa ngokuzenzakalelayo amaphasiwedi noma izimfihlo. Ezindaweni ze-DevOps, iziqinisekiso zesikhashana, ezihlanganiswe emigwaqweni, zivame ukusetshenziswa ukunciphisa ingozi yokudalulwa.

Ukuvimbela ukulahleka kwedatha (i-DLP). Ukuvimbela Ukulahlekelwa Yidatha (i-DLP) kuchaza imithetho echaza ukuthi yiluphi uhlobo lolwazi olubucayi (idatha yomuntu siqu, yezezimali, yezempilo, yempahla yobuhlakani) nokuthi lungadluliselwa ngaziphi iziteshi. Uma kwenzeka ukudluliselwa okungagunyaziwe, uhlelo lungavimba, lubethele, noma lukhiqize isaziso sokubuyekezwa.

Ukuhlaziywa kokuziphatha kanye ne-UEBA. Izixazululo ze-User and entity behavior analytics (UEBA) zifunda ukuthi umsebenzi ojwayelekile ubukeka kanjani enhlanganweni—amashejuli, amavolumu okufinyelela, izindawo, amadivayisi—kanye Zibangela izexwayiso uma kwenzeka ukuphambuka okukhulu.njengokulandwa okukhulu ngamahora angajwayelekile noma ukungena ngemvume okuvela emazweni angajwayelekile. Le ndlela iwusizo kakhulu ekutholeni izinsongo zangaphakathi kanye nama-akhawunti asengozini.

Ukuhlolwa kokungena kanye nokuqeqeshwa kweqembu okubomvu. Alikho ithuluzi elizenzakalelayo elingathatha indawo yomkhuba omuhle wobugebengu bokugenca. Ukuhlolwa kokungena okuvamile kanye namaqembu abomvu kulingisa ukuhlaselwa kwangempela enhlanganweni, izilawuli zokuhlola, izikhathi zokuphendula, kanye nokuxhumana kwangaphakathi. Imiphumela yabo ivumela ukulungisa ukucushwa, ukuvala ubuthakathaka, kanye nokuqinisekisa ukuthi izexwayiso ezilindelekile zenzeka ngempela.

Izinselele ezivamile nokuthi ungazinqoba kanjani

Ukusebenzisa isu elihambisanayo lokuphepha kwe-inthanethi enkampanini akuzona izithiyo zalo. Ezinye izinkinga eziphindaphindayo futhi izixazululo zabo ezingenzeka yilezi:

Isaziso ngokulayisha ngokweqile. Izinhlangano eziningi zigcwele izexwayiso ezivela kumathuluzi azo ahlukahlukene okuphepha. Lapho abasebenzi be-SOC bekhungathekile, ingozi yokuthi isexwayiso esibucayi singabonwa iyanda. Ukuhlanganisa amalogi epulatifomu ye-SIEM noma ye-XDR, ukusebenzisa ukuhlangana okuthuthukisiwe, nokuhlunga amaphutha amahle nge-AI kusiza ukugxila kulokho okubaluleke ngempela.

Ukuntuleka kwethalente elikhethekile. Ukuthola nokugcina ochwepheshe bezokuphepha kwe-inthanethi kunzima. Enye indlela ukusebenzisa izinsizakalo zokuthola nokuphendula ezilawulwayo (i-MDR) ukuze kuhambisane nethimba langaphakathi. Ngesikhathi esifanayo, kuyalulekwa ukuqeqesha amaphrofayili akhona (abaphathi, abathuthukisi, abasebenzi bezokusebenza) ukuze bahlanganise ukuphepha emsebenzini wabo wansuku zonke.

Ijubane elisheshayo lentuthuko. Ezindaweni ze-agile kanye ne-DevOps, izinguqulo ezintsha zesofthiwe zikhishwa njalo, futhi ukuskena kokuphepha ngezikhathi ezithile akusanele. Isihluthulelo ukuhlanganisa ukuhlolwa kokuphepha okuzenzakalelayo kumbhobho we-CI/CD, ukubeka phambili ubuthakathaka obutholiwe, nokukhuthaza indlela "yokuphepha ngokuklama" kusukela ezigabeni zokuqala zokuthuthukiswa.

Ingcindezi yesabelomali. Ukuphepha kuvame ukubonwa njengesikhungo sezindleko, futhi ukubonisa inzuzo yako ekutshalweni kwezimali kungaba nzima. Ukulinganisa izinkomba ezifana nokutholwa okumaphakathi nesikhathi sokuphendula, ukuncipha kwezigameko ezinkulu, ukulandelwa kwemithetho okuthuthukisiwe, noma izindleko ezingaba khona zokwephulwa komthetho okuvinjelwe kusiza ukukholisa abaphathi ukuthi Ukutshala imali ekuphepheni kwe-inthanethi kuwukutshala imali ekuzinzeni kwebhizinisi.

Izindawo zamafu amaningi kanye nezenkampani yangaphandle. Ukusebenza nabahlinzeki abaningi bamafu kanye nabalingani bangaphandle kwandisa izindawo zokuhlasela kanye nokungafani kobuchwepheshe. Ukulinganisa izinqubomgomo zokuskena, ukuphathwa kobunikazi, izidingo zokubhalisa, kanye nezigaba zokuphepha ezinkontilekeni zenkampani yangaphandle kubalulekile ekugcineni isimo sokuphepha esiqhubekayo.

Imikhuba emihle yokuphepha kwe-inthanethi emsebenzini kanye nasezingeni lomuntu siqu

Ngale kokwakhiwa okukhulu, kukhona iqoqo lezinto imikhuba emihle ecacile kakhulu ezenza umehluko kokubili enhlanganweni kanye nasekusetshenzisweni kobuchwepheshe ngabanye:

Nciphisa indawo yokuhlasela. Ukuklama isofthiwe nengqalasizinda ngokulula, ukuhlukanisa imithwalo yemfanelo, ukususa izinsizakalo ezingadingekile, nokuhlukanisa izizinda zebhizinisi kunciphisa inani lamaphuzu okungena kumhlaseli. Ubunzima obuncane buvame ukusho ukungalungiselelwa kahle okuncane.

Khulisa izendlalelo zokuvikela. Ukusebenzisa ukuhlonza, ukuqinisekiswa okuqinile, ukugunyazwa okuhlanganisiwe, ukubethela, kanye nezinyathelo zokutholakala okuphezulu kwandisa izithiyo umhlaseli okumele azinqobe. Kungcono ukuhlanganisa izindlela eziningana zokuzivikela ezilinganiselwe kunokuthembela esixazululweni esisodwa, okuthiwa asinaphutha.

Ukuhlela ukuqina. Uma kwenzeka ukuhlaselwa okuphumelelayo, umehluko omkhulu usekhonweni lenkampani lokuqhubeka nokusebenza noma ukululama ngokushesha. Ukusekela njalo, okuvivinywe ngokoqobo, izinhlelo zokuqhubeka kwebhizinisi, kanye nezinqubo ezicacile zokululama kunciphisa kokubili ukulimala kwezezimali kanye nedumela.

Nakekela umbono kanye nesiko lokuphepha. Ukugcina izinhlelo zisesikhathini, ukuxoxisana ngezinhlelo zokuphepha kwe-inthanethi ngokusobala nangokubonakalayo, nokugwema "inkundla yezokuphepha" (izinyathelo ezisebenza kuphela ukudala umbono omuhle kodwa ezingavikeli ngempela) kusiza abasebenzisi ukuthi bathathe lolu daba ngokungathi sína. Isisebenzi esiqotho singumngane, hhayi isixhumanisi esibuthakathaka.

Ezingeni lomsebenzisi, kokubili ebhizinisini nasempilweni yomuntu siqu, kuyalulekwa ukuthi amukele imikhuba efana Sebenzisa amaphasiwedi amade futhi ahlukileSebenzisa ukuqinisekiswa kwezinto ezimbili, qaphela ama-imeyili nezixhumanisi ezisolisayo, gwema amanethiwekhi omphakathi e-Wi-Fi angavikelekile, gcina isofthiwe yakho ibuyekeziwe, sebenzisa isofthiwe ye-antivirus ethembekile, futhi ugcine idatha yakho njalo. Ukuqeqeshwa okuqhubekayo, ukulingisa i-phishing, kanye nezikhumbuzo ezihlala zikhona kusiza ukugcina izinga elifanele lokuqapha.

Ekugcineni, ukuphepha kwe-inthanethi kwebhizinisi akukhona nje ngobuchwepheshe: kuncike ezinqubweni ezichazwe kahle, ukuphathwa kwezingozi okuhlakaniphile, futhi, ngaphezu kwakho konke, kubantu abaqeqeshwe nabazinikele. Uma amathuluzi, izinqubomgomo, kanye namasiko kuhambisana, inkampani ithola ukuzethemba, inciphise ukuchayeka kwayo ekuhlaselweni kwe-inthanethi, futhi isesimweni esingcono sokusebenzisa amathuba omhlaba wedijithali ngokuphazamiseka okuncane.