{"id":3806,"date":"2025-06-09T17:53:04","date_gmt":"2025-06-09T17:53:04","guid":{"rendered":"https:\/\/www.genexusconsulting.com\/insights\/ciberseguridad-gestion-de-riesgos\/"},"modified":"2025-07-03T16:21:05","modified_gmt":"2025-07-03T16:21:05","slug":"cybersecurity-risk-management","status":"publish","type":"insights","link":"https:\/\/www.genexusconsulting.com\/en\/insights\/cybersecurity-risk-management\/","title":{"rendered":"What a Cybersecurity Course Taught Me About the Reality of Digital Risk"},"content":{"rendered":"\n

By S<\/mark><\/a>ebasti\u00e1n Peralta<\/mark><\/a><\/p>\n\n\n\n

I’m diving deeper into cybersecurity through the course “Managing Risk in the Information Age,”<\/em> and if there\u2019s one thing I\u2019ve learned after each module, it\u2019s this: cybersecurity isn\u2019t just another component of IT\u2014it\u2019s its backbone.<\/p>\n\n\n\n

The mission is clear: protect the organization\u2019s information, systems, and operational continuity. To do this, we must identify risks in advance and apply effective measures that go beyond surface-level fixes. Risks exist because threats are always present, and it\u2019s our responsibility to reduce the attack surface as much as possible.<\/p>\n\n\n\n

What Would a Hacker Do?<\/h2>\n\n\n\n

If we had the chance to ask an attacker how to avoid being hacked, their answer would be simple and direct: practice good cybersecurity hygiene<\/strong>.<\/p>\n\n\n\n

It\u2019s not just about having antivirus software or firewalls\u2014what matters is that they\u2019re correctly configured, regularly updated, and actively monitored. A poorly configured firewall or an unaware user can be all it takes to compromise an entire system. That\u2019s exactly where attackers find their opportunity.<\/p>\n\n\n\n

Phishing: The Persistent Threat<\/strong><\/h3>\n\n\n\n

One of the most emphasized takeaways from the course is that phishing remains the most common attack vector. No matter how many layers of technology we implement, if users aren\u2019t trained to recognize suspicious emails, the risk persists.<\/p>\n\n\n\n

That\u2019s why user training is just as important as strengthening infrastructure<\/strong>. User awareness is a critical\u2014and often underestimated\u2014line of defense.<\/p>\n\n\n\n

Before, During, and After the BOOM<\/strong><\/h3>\n\n\n\n

In cybersecurity, it’s no longer a question of if<\/em> a breach will happen, but when<\/em>. This event is conceptualized as the BOOM<\/strong>.
Before the BOOM<\/strong>, we must monitor and detect.
During the BOOM<\/strong>, confirm the intrusion.
But it\u2019s after the BOOM<\/strong> where our true level of preparedness is revealed: how do we respond to a real incident?<\/p>\n\n\n\n

We need qualified analysts, the right tools, and well-defined procedures. Ethical hackers<\/strong> play a fundamental role\u2014they possess the same skills as attackers but have a different mission: to protect. They understand the adversary’s mindset, making them invaluable assets.<\/p>\n\n\n\n

Risk Management as a Guiding Principle<\/h2>\n\n\n\n

All of this comes down to a central point: risk management must be embedded in every IT decision<\/strong>. Whether it’s a new application, a server change, or a minor update, it must be evaluated through a risk lens.<\/p>\n\n\n\n

This means setting clear standards, conducting ongoing audits, and allowing exceptions only with formal justification and full visibility.<\/p>\n\n\n\n

Because attackers only need one mistake to get in\u2014while we need to be flawless every day.
Cybersecurity starts with the basics, but it\u2019s sustained through vision, strategy, and continuous commitment.<\/p>\n\n\n\n

<\/p>\n","protected":false},"featured_media":3284,"template":"","categorias":[91],"tipos":[82],"class_list":["post-3806","insights","type-insights","status-publish","has-post-thumbnail","hentry","categorias-security","tipos-blog-en"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/insights\/3806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/insights"}],"about":[{"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/types\/insights"}],"version-history":[{"count":1,"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/insights\/3806\/revisions"}],"predecessor-version":[{"id":3808,"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/insights\/3806\/revisions\/3808"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/media\/3284"}],"wp:attachment":[{"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/media?parent=3806"}],"wp:term":[{"taxonomy":"categorias","embeddable":true,"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/categorias?post=3806"},{"taxonomy":"tipos","embeddable":true,"href":"https:\/\/www.genexusconsulting.com\/en\/wp-json\/wp\/v2\/tipos?post=3806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}