Electricity and Control November 2023

CYBERSECURITY

BAS technology: the key to continuous cybersecurity

C ybersecurity is crucial in any industry sector with a reliance on digital connectivity and communications – and for companies embarking on digital transformation. Furthermore, Patrick Evans, CEO of SLVA Cybersecurity, points out that companies need to validate their security controls on a continuous basis. Breach and Attack Simula tion (BAS) technology can help businesses do this. “BAS technology enables a business to simulate com plex cyberattacks automatically and continuously – which allows for the business to test the effectiveness of its se curity prevention and detection controls,” Evans explains. “BAS platforms are ideal to help businesses ensure that the security tools they have invested in implementing are working as they should. The technology identifies, assess es, and rapidly remediates gaps in the coverage provided by a business’s security controls - before attackers can ex ploit them.” Security control validation In BAS, security control validation (SCV) is the primary use case. BAS platforms that specialise in SCV allow users to measure and benchmark the effectiveness of their preven tion and detection controls. These might include firewalls, email gateways, intrusion prevention systems, security in formation and event management (SIEM) tools, extended detection and response (EDR) solutions, and others. SCV checks whether these controls are blocking and alerting on attacks. It also analyses event logs generated by existing controls and can offer recommendations to assist a business in addressing identified weaknesses or failures. Using a BAS platform with SCV will help a business to accomplish three important goals. ƒ Assurance: BAS tools simulate threats to test and validate the effectiveness of established security controls. Data, insights, and reporting empower the in-house IT teams to answer what may be tough questions from the board about security posture and resilience. ƒ Return on Investment (ROI): BAS platforms help the business gain the greatest return on security con trol investments, via continuous validation of perfor

mance and mitigation of issues, ensuring all tools work as they should. ƒ Compliance: Leading BAS solutions can also assist with compliance with regulations and standards, such as the General Data Protection Regulation (GDPR), Protection of Personal Information Act (POPIA) and Payment Card Industry Data Security Standard (PCI DSS), by providing metrics that can be shared with auditors. In the past, security teams have used a range of meth ods to simulate attacks and identify weaknesses in their se curity defences. These may include vulnerability scanning, penetration testing and ‘red teaming’ (where a red team of cybersecurity professionals act as adversaries in an attempt to overcome cybersecurity controls). Each meth od has some value but all have drawbacks – and many of these are addressed by BAS. Comparatively, BAS platforms provide greater speed, scope, and uniformity, coupled with fewer resource de mands and less risk of error. BAS conducts automated, consistent, and continuous (24/7) attack simulations, helping to validate security con trol effectiveness, generate quantifiable metrics for analysis and reporting, and deliver insights to aid mitigation of threat coverage and visibility gaps. As the pioneer of BAS technology, Picus Security – one of SLVA Cybersecurity’s key partners – offers a cloud native, software-as-a-service (SaaS) SCV solution that helps measure and strengthen cyber resilience, by automatically and continuously testing the effectiveness of a business’s network security controls. The Picus platform provides a real-time snapshot of a company’s security posture and generates alerts when security scores fall below a predefined threshold. It offers comprehensive visibility into cybersecurity threats and risks across networks and endpoints, all from a centralised dash board. It produces actionable vendor-specific mitigation rec ommendations to help the in-house team address the gaps swiftly and effectively. It is important to note that the potential damage a cy berattack can cause within those organisations reliant on digital technologies extends beyond monetary losses and data theft. It also encompasses, potentially, reputational damage, the value of the business to stakeholders, and the erosion of trust in its integrity. This is why it is valuable for organisations to implement BAS as a means to ensure con tinuous, automated threat simulation, control testing, and validation of effectiveness. BAS technology can assist digital-forward organisa tions gain greater confidence that their existing defences and protections are strong enough, and it can help them to improve oversight, risk identification, decision making and future planning.

Breach and Attack Simulation technology enables businesses to test the effectiveness of their cybersecurity controls and mitigate issues identified – on a continuous basis.

For more information visit: https://slva-cs.com/

30 Electricity + Control NOVEMBER 2023