We are already in the second half of 2021, with less than five months until the start of a new year. It is the ideal time to start planning your information security team’s work for 2022.
To help, we have rounded up the top information security best practices and trends for next year.
Information security awareness
An Infosec report indicates that about 97% of people worldwide cannot identify a phishing email, while one in 25 people typically falls for this scam. Beyond firewalls and sophisticated IT policies, investing in human knowledge is increasingly essential.
From upskilling the IT team to teaching basic information security practices to everyone in the organization, security awareness can help prevent internal vulnerabilities and attacks.
Focus on mobile devices
With the rise of Bring Your Own Device, which intensified during the coronavirus pandemic, companies must have an information security policy specifically covering BYOD strategies.
And with the growing popularity of wearables such as smartwatches and fitness bands, the information security policy needs to cover every mobile device that accesses the network, for example by requiring automatic updates.
Machine learning in information security
Some information security strategies have adopted artificial intelligence and machine learning, mainly to identify attacks, find patterns and run predictive analytics.
Working from a dataset, especially in a Big Data model, machine learning can anticipate and respond to cyberattacks in real time, making information security simpler, more effective and less expensive.
LGPD compliance
Brazil’s General Data Protection Law (LGPD) took effect in 2020, with sanctions enforceable from August 2021. The LGPD is the first Brazilian law specifically covering data protection and privacy, preceded only by the Brazilian Internet Civil Framework (Marco Civil da Internet), which focuses solely on the digital world.
More than a legal obligation, LGPD compliance has become an ethical and social responsibility in the Brazilian market, and organizations that neglect it run a serious risk of reputational damage.
Cloud security
Cloud computing itself already provides strong security for companies, such as tighter access control and data monitoring. However, misconfigured cloud security can let attackers find gaps in the protection of information in the cloud. Cloud security is therefore moving toward a predictive model to combat cyberattacks.
Just as predictive information security can identify attacks that slip past other security endpoints, some companies are also turning to multi-factor authentication to strengthen security.
Systems integration
Another best practice for information security strategies in 2022 is systems integration. A systems integration platform centralizes all the applications a company uses, simplifying activity management and improving access control.
With our systems integration solution, your business can start its identity governance journey and strengthen existing information security approaches.
Talk to our team to learn more about our systems integration solution.