By Filippo Rossi, Network Security Solutions Architect and CEO of Joy System srl

It is often said that knowing the enemy is the first step to defeating him. In the context of computer security This principle is even more valid given that, not only from a symbolic point of view (the figure of the hacker hidden by the mask), but in concrete terms, the threats to our computer networks are always hidden, masked, unknown and therefore unpredictable.

Whether we're talking about private cybersecurity or the much more complex cybersecurity of companies, even before knowing the enemy's weapons, we should know that the enemy exists and that its presence is much closer than we actually think.

The real issue that we must focus on in the age of cyber securityIndeed, it's about awareness of cyber risks, which are too often overlooked or, worse still, underestimated. Take, for example, a small or medium-sized business with around thirty employees, where every member of staff performs the most basic IT tasks every day: downloading email, sending attachments, surfing the web. Each of these actions, without a concrete awareness of cyber risks, poses a real threat to the safety of the company network.

There's one fact, after all, that's truly sobering: most companies and computer network owners believe they've never been attacked by a virus or faced threats to their computer network. Unfortunately, this isn't the case. Threats are constant. Hidden. Unpredictable. And, sadly, they only become apparent when the damage is largely irreparable.

Being aware of cyber threats is therefore the first step to making your network more secure. Knowing, for example, what cybercriminals are and how they manifest themselves. Phishing (an email scam that relies on the fraudulent use of well-known brands to obtain sensitive data and passwords from the recipient) is the best deterrent against it. The same applies to so-called cryptolocker o ransomware, that is, those malware that encrypt the files on our computers and require a payment to obtain the unlock code (by the way: always back up your data and above all never pay!).

Awareness of cyber risks, knowing where they might lurk and how they might manifest, becomes a fundamental principle that companies, especially, should invest in. Even more so today, on the threshold of 2018, the year in which the GDPR (General Data Protection Regulation), which starting in May will regulate issues relating to the use of personal data.
Data security, in fact, depends on how we use it: how we save it, where we save it, and how we store it. All these actions, beyond the hefty fines for failing to protect data, are based on risk awareness (just think of the loss of an Excel file containing the data of newsletter recipients) and, of course, prevention.

By fully understanding the risks of a hacker attack, we can better defend ourselves. We can prevent it at every level of the network.
From implementing a suitable security infrastructure (firewall, anti-spam, SIEM, etc.) to installing professional antivirus software, performing regular backups (complete or partial), using network passwords correctly, and checking email, there are numerous and crucial preventative measures against cyber attacks. Fundamental, however, remains the concept of awareness. Cyber ​​security must be constantly monitored. Never let your guard down. Never feel safe.

If necessary, you should contact companies specialized in IT security, avoiding any kind of improvisation (the friend who is good with computers or also called "cellarman") which often risks making the situation worse.

It's important to educate yourself. Be aware of the latest cyber threats. Rely on industry professionals and take specialized courses. Stay up-to-date. Awareness of the importance of cyber security, in short, is no longer negligible today.