Boosting your Organisation’s Cyber Resilience

"ENISA and CERT-EU remain confident that, by applying this set of recommendations in a consistent, systematic manner, organisations in the EU will be able to substantially improve their cybersecurity posture and enhance their overall attack resilience."

The best practices are meant to complement the guidance issued by local authorities and not replace them.

1. Ensure remotely accessible services require multi-factor authentication (MFA).
2. Ensure users do not re-use passwords, encourage users to use Multiple Factor Authentication (MFA) whenever supported by an application (on social media for instance).
3. Ensure all software is up-to-date.
4. Tightly control third party access to your internal networks and systems.
5. Pay special attention to hardening your cloud environments.
6. Review your data backup strategy.
7. Change all default credentials.
8. Employ appropriate network segmentation.
9. Conduct regular training.
10. Create a resilient email security environment.
11. Organise regular cyber awareness events.
12. Protect your web assets from denial-of-service attacks.
13. Block or severely limit internet access for servers.
14. Make sure you have the procedures to reach out and swiftly communicate with your CSIRT.

Read More