{"id":23551,"date":"2022-10-28T11:41:51","date_gmt":"2022-10-28T09:41:51","guid":{"rendered":"https:\/\/datanets.ro\/do-configuration-errors-affect-the-effectiveness-of-security-solutions-fix-them-with-breach-and-attack-simulation\/"},"modified":"2022-10-28T13:31:26","modified_gmt":"2022-10-28T11:31:26","slug":"do-configuration-errors-affect-the-effectiveness-of-security-solutions-fix-them-with-breach-and-attack-simulation","status":"publish","type":"post","link":"https:\/\/datanets.ro\/en\/do-configuration-errors-affect-the-effectiveness-of-security-solutions-fix-them-with-breach-and-attack-simulation\/","title":{"rendered":"Do configuration errors affect the effectiveness of security solutions? Fix them with Breach and Attack Simulation"},"content":{"rendered":"

Configuration errors in security solutions are a critical problem for any company, and often traditional methods of detection and remediation are burdensome, ineffective, and require advanced skills. Cymulate’s Breach & Attack Simulation solution recommended by Datanet helps you overcome these limitations by automating the testing and simulation processes, with constant updates and actionable recommendations to solve the detected issues. Additionally, the BAS Cymulate solution is affordable, easy to use, and can be up and running in just a few hours.<\/strong><\/p>\n

 <\/p>\n

Ransomware, Phishing, DDoS, Cryptojacking, Social Engineering, these are terms that have already entered the common language because every day we hear news about cyber-attacks, security breaches, and new types of malware discovered. However, there is also an “invisible enemy” that the media and, unfortunately, many companies frequently ignore – configuration errors in security solutions.<\/p>\n

 <\/p>\n

\"\"<\/p>\n

 <\/p>\n

Admittedly, an error sounds trivial for a front-page story, but “Security Misconfiguration<\/em>” is a formidable enemy, with tens of thousands of active victims, being among the top five security threats included in the OWASP Top 10 ranking benchmark for the entire cyber-security industry.<\/p>\n

 <\/p>\n

How common are the threat of configuration errors?<\/strong><\/h2>\n

 <\/p>\n

According to recent estimations, nearly three-quarters of companies (73%) have at least one critical configuration error in their security solutions. According to \u201eVerizon Data Breach Investigations Report<\/strong><\/a>\u201c, misconfigurations of protection solutions account for more than half (55%) of the total volume of “mistakes” committed by organizations and are responsible for 20% of security breaches.<\/p>\n

The problem is so widespread that last year the US Information Security and Infrastructure Protection Agency (CISA) released a dedicated report (AR21-013A) in which it analyzed the impact of “Security Misconfiguration” at the US level, issuing a series of recommendations for strengthening security configurations to help organizations defend against attackers.<\/span><\/p>\n

 <\/p>\n

What are the causes that lead to the appearance of \u201eSecurity Misconfiguration\u201c?<\/strong><\/h2>\n

 <\/p>\n

On the one hand, it is the increasing volume of threats and attacks that organizations face, but also their rapid evolution. On the other hand, the multiple changes in the way of working. According to a Ponemon Institute study, nearly two-thirds of organizations purchased new security solutions in 2020 to meet the challenges posed by the widespread adoption of remote work. Meanwhile, the percentage has probably exceeded 90%.<\/p>\n

The problem, however, is that many of these solutions were put into use without IT departments getting to validate the newly implemented security controls. The phenomenon affects 62% of companies, and the causes range from the high speed of adoption and the excessive number of changes that had to be made, to the lack of the necessary skills in the area of cybersecurity.<\/p>\n

Another element that contributes to the appearance of errors is the frequent changes in the configurations of security solutions. 60% of organizations operate changes weekly, which represents more than a quarter even daily, to adapt to new emerging threats, to the evolution of business needs, to the requirements of end users, partners, customers, etc.<\/p>\n

It is too highly frequent considering that more than half of IT departments do not feel at all comfortable with the tasks they have in the protection zone and complain that:<\/span><\/p>\n