No longer good intentions – 2025 year of cyberresilience deeds

The recently published ENISA 2024 Report on the State of Cybersecurity in the Union highlights an alarming reality: good intentions and incremental improvements are no longer sufficient to combat the rapidly evolving cyber threats businesses face. In an increasingly interconnected and technology-driven economy, the stakes have never been higher—cybersecurity is no longer a secondary concern but a critical business enabler. A failure to prioritize robust security measures directly puts a company’s revenue, reputation, and operational stability at risk. As we approach 2025, organizations must move beyond aspirational goals and embrace proactive, strategic investments in cybersecurity to ensure resilience in the face of sophisticated attacks and growing regulatory pressures.

Put good intentions into deeds and setup:

1.Risk Management and Good Practices: Effective risk management enhances resilience.

2.Collaboration and Information Sharing: Key to staying ahead of threats.

3.Operational Preparedness: Ensures swift response to incidents.

4.Security of ICT: Critical to protect operations from cyber threats.

5.Policy Framework and Guidance: Strong policies are foundational.

 

• • Policies on risk analysis and information system security;

• • Incident handling;

• • Business continuity, such as backup management and disaster recovery, and crisis management;

• • Supply chain security, including security-related aspects concerning the relationships between each entity and its direct suppliers or service providers;

• • Security in network and information systems acquisition, development and maintenance, Policies and procedures to assess the effectiveness of cybersecurity risk-management measures;

• • Basic cyber hygiene practices and cybersecurity training;

• • Policies and procedures regarding the use of cryptography and, where appropriate, encryption;

• • Human resources security, access control policies and asset management;

• • The use of multi-factor authentication or continuous authentication solutions, secured voice, video and text communications and secured
    emergency communication systems within the entity, where appropriate.

read the full report and start communication with the Qfirst experts.

https://enisa.europa.eu/publications/2024-report-on-the-state-of-the-cybersecurity-in-the-union