EP16 Most Businesses Get This Wrong
4BIS Uninterrupted: Cyber Security and IT Podcast
Why Most Businesses Aren’t Doing Enough for Cybersecurity (and What “Enough” Really Means)
Host Chris Hammonds and COO Jon Fausz explain what they mean when they say most audited businesses “aren’t doing enough” for cybersecurity: only four out of hundreds were doing enough to make it difficult for attackers to achieve three key outcomes including: stealing financial data, compromising transactions to extort money, or deploying ransomware that cripples operations.
They discuss how initial access is easier than many think and how attackers bypass common defenses like email-only MFA, spam filters, firewalls, and EDR, including token theft, MFA fatigue, firewall vulnerabilities, and legitimate tools used with malicious intent. They emphasize that user training helps but can’t eliminate risk, since even a small click rate is enough for a breach. Cybersecurity is portrayed as an ongoing process, requiring continuous monitoring, log review, patching, visibility, and expert response to evolving threats worldwide.
00:00 Welcome and Topic Setup
00:29 What Doing Enough Means
01:56 Why Basic Tools Fail
06:08 Beyond the Basics
06:57 Limits of User Training
09:42 Security Is Ongoing
13:18 Cameras and Global Threats
15:13 Call to Action and Wrap Up
Start a conversation with 4BIS on our website at https://www.4bis.com
ENJOY OUR VIDEOS?
If you want to support 4BIS and our channel the best thing you can do is Subscribe to the 4BIS channel.
4BIS Cyber Security & IT Services
14 Knollcrest Drive
Cincinnati, OH 45237
Loading