Compliance with these standards is important and guarantees a middling level of protection. Generally speaking, however, attackers are not interested in firewalls – they are interested in their weak points. It is therefore important that enterprises identify their own vulnerabilities and rectify these using standardised procedures. Let’s take a look at the Top 20 Critical Security Controls.
These standards were put together by a large number of government and industry experts in cybersecurity and represent a prioritised, risk-based recommendation for implementation. Such procedures would help us increase awareness of existing weaknesses. In addition, they would serve as a guideline for implementing effective processes and tools to appropriately secure our systems.