{"id":5352,"date":"2020-09-02T20:47:57","date_gmt":"2020-09-02T19:47:57","guid":{"rendered":"https:\/\/www.gpsj.co.uk\/?p=5352"},"modified":"2020-09-02T20:47:57","modified_gmt":"2020-09-02T19:47:57","slug":"weathering-the-storm-prepare-your-it-to-ride-the-second-wave","status":"publish","type":"post","link":"https:\/\/www.gpsj.co.uk\/?p=5352","title":{"rendered":"Weathering the Storm: Prepare Your IT to Ride the \u201cSecond Wave\u201d"},"content":{"rendered":"

By Sascha Giese, Head Geek\u2122<\/sup>, <\/em>SolarWinds<\/em><\/a><\/p>\n

\"\"

Sascha Giese, Head Geek\u2122, SolarWinds<\/p><\/div>\n

As the second half of the year gets well underway, and lockdown restrictions generally continue to ease, one of the main topics of concern is a \u201csecond wave\u201d of COVID-19 potentially hitting the U.K. in the coming weeks or months. With some scientists predicting \u201ca second wave is almost inevitable\u201d<\/a>, the public sector needs to ensure it\u2019s ready for any eventuality. In terms of technology, while it has thus far enabled many employees to work remotely, more can be done to improve IT systems if a widespread lockdown is reintroduced.<\/p>\n

What Tech Challenges Are on the Horizon?<\/strong>\u00a0<\/strong><\/p>\n

The main difficulty is if the country as a whole tries to return to normal too soon. For many people, working from home has not been easy, or even possible. While many others are happy working from home, those individuals who haven\u2019t been able to do so will no doubt be keen to return to their offices. But if this isn\u2019t managed carefully across all organisations, the likelihood of a potential second wave becomes a worryingly high possibility. Add to this the increased allowance for more social activities to recommence, and the risks become even higher.<\/p>\n

In general, the challenges for public sector technology, if a second wave occurs, isn\u2019t much different than what has already been implemented. If further local or national lockdowns are enforced, the office-based employees needing to work from home already have the measures in place\u2014such as VPN\u2014to do this securely. And the technology supporting those on the healthcare frontline will still be up and running to help patients recover. Most or all organisations now have the processes, means, and experience to ensure moving back to remote working is doable, and should be a smoother transition than it was the first time around.<\/p>\n

However, if organisations are perhaps too enthusiastic about returning to offices, and IT solutions put in place to enable remote working are reversed and the resources used elsewhere, we\u2019re back at square one. So what can organisations do in the next few months to prepare their IT systems for a potential second wave?<\/p>\n

Where Should IT Investments Focus?<\/strong>\u00a0<\/strong><\/p>\n

One of the biggest impacts the pandemic has had on public sector organisations\u2014particularly in healthcare\u2014this year has been the increase in cyberattacks. The World Health Organization (WHO) has observed a fivefold increase in cyberattacks<\/a> since the start of the pandemic, suggesting cybercriminals have been taking advantage of the focus being less on security and more on addressing the health risks around the world. While the technology for remote working is now in place, attention over the next few months should be on ramping up cybersecurity measures across the board. Not only will this help protect organisations in the day to day, it\u2019ll also ensure, should a second wave hit, there\u2019s less risk of a cyberattack bringing down vital IT services.<\/p>\n

Vulnerability management<\/em>\u00a0<\/em><\/strong><\/p>\n

One of the first steps organisations should take is implementing a vulnerability management lifecycle. The aim of this is to highlight any system weaknesses potentially allowing a hacker to infiltrate the network. This lifecycle is comprised of five stages:<\/p>\n

    \n
  1. Identify<\/strong> any operating system weaknesses in network devices and systems, and determine how critical these are<\/li>\n
  2. Protect<\/strong> these systems and applications by increasing security measures<\/li>\n
  3. Detect<\/strong> new vulnerabilities by introducing firmware against common vulnerabilities and exposures (CVE)<\/li>\n
  4. Respond<\/strong> quickly to any new threats, particularly while existing vulnerabilities are being fixed<\/li>\n
  5. Verify<\/strong> threats have been eliminated and keep up-to-date reports on all activities<\/li>\n<\/ol>\n

    IT tool consolidation<\/em>\u00a0<\/em><\/strong><\/p>\n

    Once these processes are in place, organisations should aim to consolidate their IT management tools where possible to increase efficiency. For applications to run effectively, they rely on multiple dependencies across the IT stack. Failure or poor performance from any of these can impact the experience delivered by the application, including its security. To combat this, a layered approach is required along with automation to ensure assets and data are protected and policies are enforced.<\/p>\n

    IT consolidation is beneficial because it can help organisations to: automate monitoring to react faster to obstacles; see logs or configuration changes within the context of the item having the issue; and reduce functional overlaps between different silos having their own tools. Doing so can prove to be the cheaper option as more cost-effective solutions can be found to cover multiple needs, rather than paying for several different tools across the organisation.<\/p>\n

    Automation is particularly important to bolster cybersecurity efforts. By integrating it, organisations can improve the reliability of their critical security functions. Some examples of tools designed to support these efforts include:<\/p>\n