Cyber Security Consultancy Services

Infrastructure, Systems And Vendor Security

Safeguarding

Cyber Security is becoming an issue that is impossible to ignore yet extremely complex in its nature. In order to know what steps to take to safeguard their systems and mitigate the risk of a security breach, business leaders must first understand what – and where – the biggest risks are.

Services

PSS offers on and offsite assistance, or one-to-one consultancy, from our specialist team led by our system security manager Ian Elder (MSc Distinction in Cyber Security and Ethical Hacking)

The Issue

It is expected that cyberattacks are going to intensify and increase over the next few years. To avoid falling victim to such a security breach, businesses must take a number of steps to ensure computer protection and information security.
However, it should also be noted that unprotected or outdated systems are not the only source of security vulnerabilities. One of the biggest threats a company has that puts it at risk for an attack or data breach is its internal users. Lack of cybersecurity awareness and training can put organisations at a significantly higher susceptibility to cybercriminals. Security doesn’t just mean taking measures to prevent the attacks but also providing training and guidance on how to handle incident response in the event that an incident occurs.

The NIS Directive May 2018

As of May 2018, the NIS (Networks and Information Systems) Directive will come into effect in the UK, this will apply irrespective of Brexit. The UK business network and information systems are essential services that support and play a vital role in British society, it’s essential that these remain reliable and fall in line with up-to-date security protocols.

Cyber security threats have been on the increase over the years. With this in mind, the EU took action in 2013 to plan and ensure that member states are prepared in the event of a cyberattack. A proposal was rolled out and subsequently became a European directive in August 2016, this has given countries enough time for their respective national laws to act upon it.

The aim of the NIS Directive is to eradicate incidents involving network and information systems, as well as potentially enhancing Britain’s infrastructure and economy. Without implementing the NIS Directive, incidents such as the 2015 attack on Ukraine’s electricity chain, the 2016 attack on US water utilities and last year’s WannaCry ransomware attack could become more of a regular occurrence.

Essentially, the NIS Directive will highlight overall cyber security and know-how in Britain and the EU for companies and organisation’s identified as either operators of essential services (OES) or Competent Authorities (CAs). These groups rely heavily on information networks and will need to enhance their security appropriately – ensuring the management of risks involved with their network/information structures.

The NIS directive provides an opportunity to put plans in place to improve the state of national cyber security. Process Safety Solutions is providing support to clients and is committed to a seamless and effective approach to implementing the NIS Directive requirements.

PSS can assist by developing company cyber security standards and guidance and advise clients on how to build a secure internal cyber security program.
The deadline for member states to fall in line with the Directive requirements is the 9th of May 2018 – contact PSS if you would like to learn more about NIS Directive.