War and global conflict impact on cyber risk

Global tensions — including the conflict in Iran — have elevated cyber risk across financial services and other critical sectors. US institutions have moved to high alert amid concerns of retaliatory cyber activity, and analysts warn that malicious targeting of Western commercial entities is possible. In Australia, experts assess the threat level as elevated for financial services, energy, water, defence and government agencies. ASD continues to advise all organisations to reinforce core cyber hygiene and ensure essential controls are fully in place.

 

Cyber Hygiene for Businesses: Do’s and Don’ts

Cyber hygiene is a business necessity. Most cyber incidents occur due to simple gaps like weak passwords, unpatched systems, or employee mistakes — not advanced attacks. Good cyber practices significantly reduce the risk of data breaches, ransomware, and financial loss.

 

DO’s

  • Enable Multi-Factor Authentication (MFA) on all critical and privileged accounts.

  • Patch and update applications, operating systems, and security tools promptly, prioritising critical vulnerabilities.

  • Train employees regularly on phishing and cyber awareness.

  • Back up critical data securely, maintain multiple copies, and test recovery processes.

  • Restrict administrative privileges and disable unused admin accounts.

  • Implement application control to prevent unauthorised software from running.

  • Harden user applications and block untrusted macros.

  • Monitor for unusual activity, especially during periods of global instability.

  • Prepare for and respond to potential DDoS attacks.

  • Strengthen protection against brute‑force attempts.

  • Secure your website to prevent defacement.

  • Enhance ransomware protection across systems and endpoints.

  • Secure all devices, including edge devices, using recommended configurations.

  • Review modern defensible architecture principles to improve resilience.

  • Maintain an incident response plan and ensure teams know how to execute it.

 

DON’Ts

  • Don’t ignore updates, security alerts, or patching requirements.

  • Don’t use shared accounts or weak passwords.

  • Don’t grant admin access unless absolutely necessary.

  • Don’t allow untrusted macros or unauthorised applications.

  • Don’t operate outdated or unsupported systems.

  • Don’t leave websites or online services unprotected.

  • Don’t overlook the risk of DDoS attacks during global instability.

  • Don’t rely on a single backup or untested recovery process.

  • Don’t ignore the security of edge devices, which are increasingly targeted.

  • Don’t assume your business is too small to be targeted.

 

Why Cyber Hygiene Matters

Poor cyber hygiene can lead to financial loss, downtime, regulatory penalties, reputational damage, and loss of customer trust. During times of global tension, opportunistic cyber activity often increases, especially against organisations with weak or outdated controls.

 

How ViCyber Helps

ViCyber supports businesses in strengthening their cyber posture through:

  • Cyber risk assessments

  • Employee awareness training

  • Identity protection

  • Compliance and AFSL-aligned programs

  • Ongoing monitoring and support

Strong cyber hygiene today prevents major incidents tomorrow