Advisory on Data Breach Prevention

For technical teams

1. Organisations and Security Operation Centres (SOCs) are required to take the following actions: Official source
2. Perform regular security test on your application systems to check for vulnerabilities and loopholes; Update your critical assets with the latest security patches and updates; Warn your users not to open or click on unsolicited mails and links with/without attachments; Ensure that anti-virus/anti-malware signatures are up to date and functioning; Disable FTP services where unnecessary; Block or restrict access to every port such as port 3389(RDP), port 5900 (VNC) and port 22 (SSH) and services except for those that should be publicly available; Review your user credentials list for any new additional unknown user; Encrypt your database; Monitor your environment closely for any anomalies; Check whether your organisation's credentials been exposed in pastebin; If you suspected that your servers have been compromised, conduct a proper incident handling and escalation; and Report immediately to NACSA if your organisation fall victim to a data breach. Official source