Prepare yourself for a nationwide cyber attack

[Audrey McNeil <audrey () riskbasedsecurity com>]

http://www.tctimes.com/news/prepare-yourself-for-a-nationwide-cyber-attack/article_7dbdc9d8-22c5-11e3-b1b1-0019bb2963f4.html

> From the raging fires that swept through Colorado this summer to Hurricane
Sandy pounding the East Coast last year, America is no stranger to natural
disasters. But for former Homeland Security Secretary Janet Napolitano,
there’s a manmade disaster waiting to happen. For Napolitano, a nationwide
cyber attack isn’t a matter of ‘if’ but a matter of ‘when.’

“Our country will, at some point, face a major cyber event that will have a
serious effect on our lives, our economy and the everyday functioning of
our society,” Napolitano told the National Press Club in August.

Cyber security company Symantec reports cyber attacks increased by 42
percent last year, with 31 percent of attacks focusing on small businesses
and 32 percent of attacks targeting mobile devices.

In such a hyper-connected world where everybody is accustomed to accessing
technology at any time, an Internet crash could potentially be one of the
most devastating disasters in the world. Banks could close, restricting
people from access to money. Power grids may be disrupted, cutting off
electricity and heat. Pipelines of water could be shut off and cellphones
could become inoperable.

Whether natural or manmade, families should always have an emergency kit
available and a meeting place in case of a disaster. FEMA recommends that
each person should have one gallon of water per day for drinking and
sanitation, as well as canned food. How much food and water should be saved
up ahead of time is up to the individual — a cyber attack could last a few
days to a few months. A first-aid kit, tent, rain gear, compass and matches
in a waterproof container are other items you should consider for your
survival kit.

A battery-powered radio capable of receiving NOAA alerts and two-way radios
(walkie-talkies) may be your only method of communication, especially if
cellphones cease to work. You may want to consider having a solar-powered
or hand-cranked radio as well, in case your batteries run out.

Outside of basic human necessities, a cash reserve should be kept within
reach, in case credit and debit cards can’t make purchases. Birth
certificates, Social Security cards and other essential documents should
also be held in a secure container, since access to a computer won’t be
guaranteed.

Discuss and plan a meeting spot for family members and friends to gather at
in case of a disaster, since texting, Facebook and other social media sites
may be disabled. If you have younger kids, be sure to rehearse your
emergency plans until they memorize them.

It doesn’t take a cyber attack to render technology useless — a powerful
snowstorm or rain season can take out power lines and cell phone towers.
Good planning in the event of any disaster can be the difference of life
and death. Build or update your emergency kit and discuss your emergency
plans with friends and family now before a disaster strikes.

Online safety tips

 • Limit the amount of personal information you post on social media sites,
chat sites, forums and online games.

• Know and use privacy settings provided on sites like Facebook and Twitter.

• Be suspicious of unknown links or requests sent through email or text
messages. Don’t click on unknown links or answer strange questions sent to
your mobile device, regardless of who the sender appears to be.

• In your email, turn off the option to automatically download attachments.
Save and scan any attachments before opening them.

• Verify the authenticity of requests from companies or individuals by
contacting them directly, especially if you are being asked to provide
personal information.

• Pay close attention to website URLs. Malicious websites sometimes use a
variation in common spelling (petfun.com instead of petfun.net, for
example) to deceive unsuspecting computer users.

_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://lists.osvdb.org/mailman/listinfo/dataloss
For inquiries regarding use or licensing of data, e-mail
        sales () riskbasedsecurity com 

Supporters:

# OWASP http://www.appsecusa.org
# Builders, Breakers and Defenders
# Time Square, NYC 20-21 Nov
o()xxxx[{::::::::::::::::::::::::::::::::::::::::>

Risk Based Security (http://www.riskbasedsecurity.com/)
Risk Based Security offers security intelligence, risk management services and customized security solutions. The 
YourCISO portal gives decision makers access to tools for evaluating their security posture and prioritizing risk 
mitigation strategies. Cyber Risk Analytics offers actionable threat information and breach analysis.