Targeted Attacks Are The New Normal
Forrester defines a targeted attack as one in which a threat actor is targeting a specific organization. The intentions and capabilities of threat actor groups obviously vary, and not all targeted attacks are state-affiliated. There are two common attack vectors seen in targeted attacks: phishing and watering holes.
Use Forrester’s Targeted-Attack Hierarchy Of Needs
Targeted attacks are going to happen, and you must prepare for them. The first four basic needs of Forrester’s Targeted-Attack Hierarchy of Needs are: 1) an actual security strategy; 2) a dedication to recruiting and retaining staff; 3) a focus on the fundamentals; and 4) an integrated portfolio that enables orchestration.
Essential Needs Precede Prevention And Detection
Develop a strategy for defending your environment before you make investments. Focus on the first four needs and ensure that your leadership understands that your goal is to build resiliency to quickly respond and recover from targeted attacks.