{"id":7057,"date":"2020-11-23T12:46:02","date_gmt":"2020-11-23T12:46:02","guid":{"rendered":"https:\/\/outofsite.biz\/cynance\/?p=7057"},"modified":"2021-03-10T08:51:48","modified_gmt":"2021-03-10T08:51:48","slug":"manchester-united-cyber-attack-a-textbook-response","status":"publish","type":"post","link":"https:\/\/outofsite.biz\/cynance\/manchester-united-cyber-attack-a-textbook-response\/","title":{"rendered":"Manchester United Cyber Attack: A Textbook Response"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"7057\" class=\"elementor elementor-7057\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e0897e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e0897e\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2a13f229\" data-id=\"2a13f229\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-264884f6 elementor-widget elementor-widget-text-editor\" data-id=\"264884f6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.11.5 - 14-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The beautiful game is feeling a little less beautiful for some fans this week as Manchester United football club revealed last Friday that they were a <\/span><a href=\"https:\/\/www.businesswire.com\/news\/home\/20201120005752\/en\/Manchester-United-Plc-Update-on-Cyber-Security-Breach\" target=\"_blank\" rel=\"noopener\"><span style=\"font-weight: 400;\">victim of a \u2018sophisticated\u2019 cyber attack<\/span><\/a><span style=\"font-weight: 400;\">. They were also quick to assure fans that preliminary assessments show that their data was not affected.<\/span><\/p>\n<p style=\"font-weight: 400;\">\n<\/p><p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">The Manchester United cyber attack is yet another reminder that it is a matter of when, not if, a cyber attack will hit every organisation. However what is interesting about this is Manchester United\u2019s cybersecurity defences, and how they kicked in when needed.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Manchester United Cyber Attack Response<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Manchester United\u2019s press release told us about their cyber attack response and contained several interesting glimpses into their cybersecurity risk management. The contents of the press release told us:<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">&#8211; Manchester United have extensive policies and procedures in place to deal with a cyber attack, and they rehearsed for a scenario like this.&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">&#8211; Their network security defences identified the attack and disconnected the affected systems to contain the damage and protect data.&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">&#8211; They acted swiftly to contain the attack and at the time of the press release they were working with expert advisers to investigate the incident.&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">&#8211; Manchester United remained fully operational in the aftermath of the attack, and were able to play their scheduled match against West Bromwich Albion at home on Saturday (which they won).&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">If in fact their <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/network-security\/\"><span style=\"font-weight: 400;\">network security<\/span><\/a><span style=\"font-weight: 400;\"> and <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/security-risk-and-compliance\/cybersecurity-risk-management\/\"><span style=\"font-weight: 400;\">cybersecurity risk management plans<\/span><\/a><span style=\"font-weight: 400;\"> did protect fans\u2019 data, then the Manchester United cyber attack response will have also saved them from a GDPR fan and a hit to their reputation.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">This incident, and Manchester United\u2019s cyber attack response are exactly what cyber professionals refer to when they talk about cybersecurity risk management, and the benefits of being prepared. The information in the press release sounds like a textbook cybersecurity plan.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Learning the lessons from the Manchester United cyber attack response<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">While Manchester United remains tight lipped about what exactly happened, the press release did give us some clues about how their cybersecurity risk management plans worked.<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\"><b> Strong cyber defences<\/b><\/li>\n<\/ol>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Manchester United\u2019s release said that their cyber defences detected the attack, and immediately disconnected the affected systems to prevent further damage. It was that initial disconnection that meant that the website and app were unaffected, and most likely how they can be confident enough to say that there is no evidence of a data breach. The quick response also meant that Manchester United did not experience any operational downtime, and were able to play a home match within days of the attack.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Lesson learned: Ensure network security monitoring and alerts systems are up to date and operational. Early detection will stop the cyber attack and limit the damage it can cause.<\/span><\/p>\n<ol start=\"2\">\n<li style=\"font-weight: 400;\"><b> Effective preparation<\/b><\/li>\n<\/ol>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Manchester United said that they had a cybersecurity risk management plan in place, including policies and procedures to deal with a cyber attack, and that more importantly, they had rehearsed for the eventuality of an attack. This meant that when the Manchester United cyber attack actually took place, they were able to follow those policies and procedures quickly, and everyone knew their role. At the time of the press release, they were already working with outside investigators, and they had informed the Information Commissioner&#8217;s Office about the attack.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Lesson learned: Policies and procedures are a vital part of any cybersecurity risk management plan as they set out what needs to be done in the event of an attack. However, even more vital to a successful cybersecurity risk management plan is rehearsing what happens in the event of an attack, so that no one goes in blind.<\/span><\/p>\n<ol start=\"3\">\n<li style=\"font-weight: 400;\"><b> Uninterrupted operations<\/b><\/li>\n<\/ol>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Manchester United were able to mobilise quickly after the cyber attack due to their preparation. Although we do not know exactly when the attack took place, we can assume it was sometime in the week leading up to the press release on 20th November. Manchester United did not miss a match last week, including the home match on Saturday, which confirms that they did not experience any operational downtime as a result of the attack.&nbsp;<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Lesson learned: Effective network security and cybersecurity risk management plans will help avoid operational downtime in the event of an attack. Operational downtime causes loss of revenue and reputation, and in a worst case scenario, <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/warning-ransomware-attacks-may-cost-lives\/\"><span style=\"font-weight: 400;\">could even be fatal<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">It pays to be prepared<\/span><\/h2>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Cyber attacks can target any organisation, wherever they are in the world, and that can\u2019t be avoided. However what can be controlled is how much damage that attack does. The Manchester United cyber attack response has shown just how effective proper <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/network-security\/\"><span style=\"font-weight: 400;\">network security<\/span><\/a><span style=\"font-weight: 400;\"> defences and <\/span><a href=\"https:\/\/outofsite.biz\/cynance\/infrastructure-security\/network-security\/\"><span style=\"font-weight: 400;\">cybersecurity risk management<\/span><\/a><span style=\"font-weight: 400;\"> can be at reducing the impact of an attack when it actually happens.<\/span><\/p>\n<p style=\"font-weight: 400;\"><span style=\"font-weight: 400;\">Stay safe<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>The Manchester United cyber attack could have been worse. Their cybersecurity policies, procedures, and defences prevented a major data breach<\/p>\n","protected":false},"author":10,"featured_media":7061,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[145,146],"_links":{"self":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7057"}],"collection":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/comments?post=7057"}],"version-history":[{"count":0,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/posts\/7057\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media\/7061"}],"wp:attachment":[{"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/media?parent=7057"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/categories?post=7057"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/outofsite.biz\/cynance\/wp-json\/wp\/v2\/tags?post=7057"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}