Index of Guide – Cyber Guide

1 – Legislation and Compliance

1.1 – The Swiss Data Protection Act (FADP and nFADP)

1.1.1 – The Swiss Data Protection Act (FADP)

1.1.2 – The guiding principles of the FADP

1.1.3 – Who is affected by this law?

1.1.4 – The nFADP: What’s new in the revision

1.1.5 – What are the risks?

1.1.6 – What to do?

1.1.7 – Further information

1.2 – Data management and security

1.2.1 – Why protect your data?

1.2.2 – Privacy Policy

1.2.4 – Data life cycle

1.2.5 – The rights of individuals

1.2.6 – What to do

1.3 – Contractual matters

1.3.1 – Legal instruments to reduce cyber risk

1.3.2 – Contractualisation: Four pitfalls to avoid

1.3.3 – Operational risks

1.3.4 – What must be included in a data protection contract?

1.3.5 – What are the goals of internal guidelines

1.4 – Further information

2 – Human factor

2.1 – Cybersecurity awareness

2.1.1 – Business maturity assessment

2.1.2 – The CIA triad, impacts and awareness

2.1.3 – Humans: the first line of protection

2.1.4 – Best practices

2.1.5 – Points to remember

2.2 – Social engineering

2.2.1 – The human factor as a tool

2.2.2 – Types of scams

2.2.3 – Access rights

2.3 – Human risk management

2.3.1 – Employee background checks

2.3.2 – Policies, procedures and guidelines (ISO 27001)

2.3.3 – Examples of measures

3 – Governance and cyber risks

3.1 – Cyber-risks

3.1.1 – Definitions and types

3.1.2 – Impacts of cybercrime

3.1.3 – Main challenges

3.1.4 – Cyber-risk management

3.2 – Timeline of a cyberattack

3.2.1 – Reconnaissance

3.2.2 – Infiltration

3.2.3 – Lateral movement

3.2.4 – Execution and anti-forensics

3.4 – Minimum best practices

3.4.1 – Staff

3.4.2 – Processes

3.4.3 – Technology

4 – Technology and Protection

4.1 – Solutions and technologies geared to SMEs

4.1.1 – Attack scenarios and protection tools

4.1.2 – The classic modus operandi for cyberattacks

4.1.3 – Passwords

4.1.4 – Multi-factor authentication

4.1.5 – Employee awareness

4.1.6 – Vulnerability scans

4.1.7 – Update management

4.1.8 – Manual penetration testing

4.1.9 – Hardening

4.1.10 – Endpoint Detection and Response (EDR)

4.1.11 – Firewalling and web filtering

4.1.12 – Network segmentation

4.1.13 – Log monitoring

4.1.14 – What are the priorities?

4.2 – Protecting your application portfolio

4.2.1 – Mapping your application portfolio

4.2.2 – Auditing your application portfolio

4.2.3 – The risk matrix and corrective measures

4.2.4 – What application protection is there?

5 – Business Continuity

5.1 – Business continuity at a company: theoretical underpinning

5.1.1 – Why draw up a BCP?

5.1.2 – What are the objectives of the BCP?

5.1.3 – What are everyone’s roles in a crisis?

5.1.4 – Defining the priority tasks to be resumed

5.1.5 – Communicating in a crisis

5.2 – Factors behind the success of a BCP

5.2.1 – Defining a risk matrix or risk heat map

5.2.2 – Involving all the teams

5.2.3 – Providing for a step-by-step response procedure

5.2.4 – Information and communication

5.2.5 – Do not forget external parties

6 – Contracts and audit

6.1 – Contracts and SLAs

6.1.1 – Legal context

6.1.2 – What is an SLA?

6.1.3 – What are the key components?

6.2 – Digital risk assessment and management, and integration into processes

6.2.1 – How to identify threats to your company

6.2.2 – How to identify, assess and treat digital risks

6.2.3 – How to integrate risk management into day-to-day activities

7 – Responsibilities of members of the board of directors

7.1 – Roles and responsibilities of board members

7.1.1 – Legal framework

7.1.2 – What is the directors’ role?

7.2 – Working at board level on the risks of cyberattacks

7.2.1 – New approaches

7.2.2 – Engage in discussion with specialists

7.2.3 – Seven questions to enable the adoption of a suitable approach

7.3 – Identifying opportunities to use digital trust to promote business development

7.3.1 – Corporate digital responsibility

7.3.2 – Cybersecurity versus digital trust

8 – Resources

8.1 – Glossaries

8.2 – Tools and diagnostics

8.3 – Other resources

National Cyber Security Centre

Report an error

2023 © Trust Valley. All rights reserved.

Terms & Conditions