All Questions & Answers, page 2 - Improve · Red Bridge Cyber

Red Bridge Cyber

Q&A

All questions

61-120 of 198 · page 2 of 4

What cybersecurity does a small business actually need?

Does SMB1001 count toward DISP membership?No.
What is Essential Eight Maturity Level 1?Essential Eight Maturity Level 1 is the entry tier of the Australian Signals Directorate's maturity model - the level designed to stop opportunistic attackers using widely available tools against whoever looks easiest.
What is Essential Eight Maturity Level 2?Essential Eight Maturity Level 2 is the middle tier of the Australian Signals Directorate's 3-level maturity model for its Essential Eight mitigation strategies.
What is Essential Eight Maturity Level 3?Essential Eight Maturity Level 3 is the top tier of the Australian Signals Directorate's maturity model - designed to counter sophisticated, well-resourced adversaries who pick a specific organisation and adapt their methods to it.
What is APRA CPS 234 and does it apply to me?CPS 234 is the Australian Prudential Regulation Authority’s information-security standard.
What is multi-factor authentication (MFA)?Multi-factor authentication (MFA) requires a second proof of identity on top of your password - a code from an app, a tap on your phone, a hardware key - so that a stolen password alone is not enough to get in.
What is EDR (Endpoint Detection and Response)?EDR (Endpoint Detection and Response) is security software that runs on your computers and devices - your “endpoints” - and watches for suspicious behaviour rather than only matching known virus signatures the way traditional antivirus does.
What is cyber insurance and does a small business need it?Cyber insurance is a policy that covers the costs a business faces after a cyber incident - data recovery, business interruption, legal and notification costs after a breach, and sometimes ransom payments and incident-response specialists.
What is the ACSC (Australian Cyber Security Centre)?The ACSC - the Australian Cyber Security Centre, part of the Australian Signals Directorate - is the federal government body responsible for cyber security advice in Australia.
What is a SOC (Security Operations Centre)?A SOC (Security Operations Centre) is a team - often staffed around the clock - that monitors an organisation’s systems for security threats and responds when something is detected.
What is a vulnerability scan, and how is it different from a penetration test?A vulnerability scan is an automated check that probes a system - a website, a server, a network - against a database of known weaknesses and misconfigurations, and reports what it finds.
What is business email compromise (BEC)?Business email compromise is a scam where an attacker uses email - either a hacked account or a convincing fake - to trick someone in a business into sending money or sensitive data, and it is one of the costliest cybercrimes facing Australian businesses.
Does my small business have to report a data breach in Australia?Under Australia’s Notifiable Data Breaches scheme, whether you must report a breach depends on whether the Privacy Act covers you - and most very small businesses are carved out, but the exceptions are wide enough to catch many.
Does a small business need an incident-response plan?Yes - but for a small business an incident-response plan is a one-page document, not a corporate binder: it is simply the list of who does what in the first hours after something goes wrong, written down before you need it.
What is a passkey and should my business use them?A passkey is a modern replacement for a password that lives on your device and unlocks with your fingerprint, face or PIN - and because there is no password to phish, steal or reuse, it shuts down the most common way accounts get broken into.
What is supply-chain cyber risk for a small business?Supply-chain cyber risk is the danger that reaches you not through your own systems but through a supplier, tool or contractor you rely on - when their breach becomes your problem.

Which Australian domain registrar should your small business use?

Website security checklist for Australian small business: 7 things to verify yourself