Motivation.
WHAT MOST ATTACKS ARE
Automated and indiscriminate.
Software scans continuously and exploits whatever it finds.
WHAT THAT MEANS
You are not selected. You are found.
WHAT ATTACKERS WANT
Money, directly: fraud, ransom, stolen payments
Resources: your server, your bandwidth, your email
Data that can be sold or used Access to your customers or suppliers
THAT LAST ONE
A small supplier is frequently attacked as a route to a larger customer.
WHAT MAKES A BUSINESS ATTRACTIVE
Weak controls Money moving regularly Staff who can authorise payments Data worth taking
WHAT SIZE IS TARGETED
Every size. Smaller businesses more often, because defences are weaker.
WHAT IS RARELY THE MOTIVE
Personal animosity toward you.
WHAT THAT CHANGES
Defence is about not being easy, rather than about being invisible.