Close up of a person working on a laptop and another working on an iPad

Precautionary Measures to Reduce Your Cyber Risk

January 20, 2020

Precautionary Measures to Reduce Your Cyber Risk

Synopsis
4 Minute Read

With rising tensions between western nations and Iran, here’s how you can mitigate the increased cyber security risk.

With the recent increase in tension between Iran and western nations, MNP is encouraging vigilance among Canadian businesses and recommend you thoroughly review your current cyber security controls. While our team is not aware of any specific cyber security threat or attack campaign in progress, the potential for one is always present — and given the current climate, even more likely than normal.

Industries that Iranian threat groups have previously targeted or are likely to target in the future include:

  • Manufacturing
  • Oil and gas
  • Public sector and government agencies
  • Post-secondary institutions
  • Research organizations
  • Airlines

Know What to Expect

To reduce your risk exposure and prepare yourself for any possibility, we urge your cyber security teams to review the common tactics, techniques and procedures (TTPs), as documented in the MITRE Corporation’s ATT&CK database.

APT33 — Suspected Iranian threat group that has previously targeted aviation and energy businesses in the U.S., the Middle East and Asia. Read More…

ATP39 — Iranian cyber espionage group that tends to target the telecommunications and travel industries with the specific aim of gaining access to personal identifiable information. Read More…

CopyKittens — Iranian cyber espionage group that has previously targeted governments in the U.S., the Middle East and Europe. Read More…

Immediate Steps You Can Take

Whether or not you believe your organization is an imminent target, take this opportunity to review your processes, controls and procedures and ask some pointed security questions — including:

  1. Review and test your cyber incident response plan
  2. Ensure team members are aware of all cyber security policies and procedures — and feel empowered to report any suspicious activity (e.g. emails, etc.)
  3. Is all your software and firmware up to date?
  4. Have you backed up all sensitive and necessary information to an offline source?
  5. When was the last time you conducted a cyber maturity assessment?

MNP Can Help

You can never be too safe; especially in times of great uncertainty. No matter where you are in Canada, we have a national cyber security team member nearby ready to assist with any questions or concerns you might have.

For more information, contact:

National
Danny Timmins, CISSP
National, Cyber Security Leader
[email protected]

B.C.
Peter Guo, CPA, CA, CISA, ABCP, MBA
B.C. Leader, Enterprise Risk Services
[email protected] 
Elizabeth Vannan
B.C. Leader, Technology Solutions
[email protected]
Alberta
Trac Bo, CPA, CA, CISA, CRISC, ABCP, CGEIT
Technology Risk Services Leader
[email protected] 
Saskatchewan
Sean Devin
National Leader, Technology Solutions
[email protected] 
Manitoba
Gustavo Meschler, CISA
Partner, Enterprise Risk Services
[email protected]

Brian Beveridge, CMC
Partner, Technology Consulting Services
[email protected].ca 
Ontario
Eugene Ng, CISSP, PCI QSA, BCOMM
Eastern Canada Cyber Security Leader
E: [email protected] 
Hash Qureshi, PA, CMA, CRISC, CISA, CISSP, CRMA, P.ENG, MSC
Partner, Enterprise Risk Services
[email protected] 
Quebec
Tom Beaupre, QSA, CISSP, CISA, BS
Quebec Cyber Security Leader
[email protected] 

Insights

  • Confidence
    Holding a portfolio on one hand, comparing data on another

    July 28, 2021

    How to optimize value from an Internal Audit co-sourcing partnership

    Co-sourcing your internal audit function can help you navigate several contemporary challenges — including the need for greater agility and subject matter expertise, as well as cost and resourcing pressures. Here we investigate practical steps to find the right vendor and make this relationship as seamless, targeted, and cost effective as possible.

  • Progress
    person reviewing graphs on their phone

    July 26, 2021

    Automating finance, so you can focus on your business

    Cloud accounting and bookkeeping solutions allow you to focus on the critical parts of your business instead of shuffling through paperwork every week.

  • Progress
    ""

    July 22, 2021

    Cloud accounting and bookkeeping can transform your real estate and construction operations

    Priorities are changing after the long hours that came with navigating COVID-19. Here’s how you can free up time to focus on what really matters.