Threats and the pandemic-era digital shift
The CSA presentation distinguishes cyber attacks from terrorism-related cyber activity. It discusses ransomware, data theft, business-email compromise and denial-of-service attacks. Increased home working, online services and cloud use expanded exposure; cloud services involve shared responsibility rather than transferring all security responsibility to a provider.
Seven security essentials
The source’s seven-part asset-based approach combines people, controls and monitoring. Its 2019 SME survey figures and pandemic incidents are historical evidence, not current prevalence estimates.
| Essential | Application |
|---|---|
| Know assets | Inventory systems and the information they hold. |
| Authorised access | Limit access to approved people and roles. |
| Timely patching | Keep systems and applications updated. |
| Administrative privilege | Assign appropriate administrator access. |
| Detect breaches | Monitor and respond promptly. |
| Software control | Allow approved software to operate. |
| Encryption | Protect sensitive information. |
Secure video conferencing
Secure the devices used to join meetings, admit only authorised participants and protect meeting content through appropriate encryption. The lecture notes that provider claims of encryption do not necessarily mean true end-to-end protection; review the current service architecture and access controls for sensitive discussions.
Ransomware exercise and recovery
The exercise begins with an attachment, a slowing computer and encrypted files. Isolate the affected device from networks and notify IT or the incident-response team promptly, following their instructions. Contain the incident, seek official assistance, establish the entry point, clean systems and restore verified backups. Test offline backups in advance. The presentation’s vendor and grant examples belong to its publication period and are not current endorsements or funding commitments.