A precursor can indicate or give insight that something may occur in the
future. Precursors are beneficial because it allows companies to anticipate
and prepare for a possible cyber ambush. Indicators are like hints that
something did occur or is happening in the present. They can come from
suspect repeated behaviour or information from reports.
According to an article by Keon Van Impe, there are typical indicators or
event types to look for and will require further attention. (1)
Some indicators to look for:
' ' ' ' ' ' * unusually high network activity
' ' ' ' ' ' * presence of unusual network ports
' ' ' ' ' ' * configuration changes without approvals
' ' ' ' ' ' * user accounts being locked out unexpectedly'
Looking at the Afterschool Program, most of the challenges they will face
can derive from being a new company. A blog from Software Engineering
Institute describes a few challenges that may arise. (2)
' ' ' ' ' ' * not having a list of critical assets
' ' ' ' ' ' * not having a threat program
' ' ' ' ' ' * documented plans and policies are not developed
Sources
!. Impe, K (2018) Don't Dwell On: How to Detect a Breach On Your
Network More Efficiently. Security
Intelligence.'https://securityintelligence.com/dont-dwell-on-it-how-to-detect-a-breach-
on-your-network-more-efficiently/
2. Fritz, M (2019) Top 5 Incident Management Issus, Software Engineering
Institute.'https://insights.sei.cmu.edu/blog/top-5-incident-management-issues/
