Cyber security experts have issued a warning against Chinese online marketplace megalith Temu's 'very dangerous' cash giveaway, claiming that it could lead to serious fraud. 

The retailer is offering users 'free' cash in exchange for new sign-ups - and hundreds of people are jumping on the bandwagon.

Screenshots of multiple £50 payments going into social media users PayPal accounts have been plastered across the internet, as they prompt others to make the most of the unusual deal. 

The shopping website, which sells extremely cheap goods sent directly to users from China from wholesalers, is running a promotion offering a combination of cash and store credit in exchange for new members joining up - allegedly all people need to do to start getting rewards is to get new users to click on their sign up link.

However, there are concerns that people entering the promotion could have their information 'sold' to advertisers with the giveaway being dubbed 'too good to be true'. 

MailOnline spoke to cyber security experts to find out if there are any risks associated with the controversial promotion and whether it's safe to sign up. 

Jake Moore, Global Cyber Security Advisor at ESET, warns that the cash is 'not free' and giving away your data for money can be 'very dangerous down the line'.

He explained: 'This app is effectively offering money, not for free, but it's offering money in exchange for personal data and device data.

'Most apps require some sort of data to function. It's really important to pay attention to all submissions requested by these apps.

'Some apps can be sneakier than others and some request more than others. Data is the new currency and it has been for a little while now.

'When companies trade in data, that personal data can be analysed, which might not sound too bad. But when it gets shared, it can be damaging further down the line.'

The expert added: 'In extreme cases, it can even be used for identity fraud because if that data is compromised, it can be very dangerous for those people that have given their data away.

'They have given their data away freely, so they're not being conned out of it. It will all be written down in the terms and conditions but of course, people aren't reading those. 

'They're just seeing the end goal of of being offered £50 to access that data. So I think rightly so people are beginning to question if they should have given their data away for payments.'

He explained that cybercriminals are 'very good at pretending to be whoever they want to be' and the data could allow them to know things about you they wouldn't otherwise, causing you to think they are genuine.

Jake told MailOnline: 'In theory, Temu is a Chinese app and it may be allowed to share its company data with the Chinese government. That can be a worry, because with most companies, when they say that the data won't be seen anywhere else, you can rest assured that it shouldn't be.

'But when they have different laws in different countries that may in their country legally allow access if required, then it can be a worry. 

'So, for example, criminals could get hold of that data potentially and use it to phish people. So this could be phishing emails or texts, or even voice calls where they purport to be from your bank.

'Once you let your guard down, this is where they may be able to force you into moving your money, or they might force you into handing over a password or a two-factor authentication code to them, purely because they knew some personal details about you.'

The warning comes just as the UK and US identified China as the source of a wave of cyberattacks on public figures and institutions.

The rules in the 'Cash Reward' promotion state users agree to give Temu permission to use their 'photo, name likeness, voice, opinions, statements, biographical information, and/or hometown and state' worldwide. 

Mark Wilshaw, Cyber Security Services Manager at SYTECH, also chimed into the debate.

He said: 'The level of personal information that is required to enter the giveaway, coupled with their rules leads to a risk to both privacy and security. 

'The recorded personal information can be sold to marketing companies who will then bombard you with spam contact.

'It is usual for businesses to sell some information - however, it is not normal practice for personal information such as a photograph and or a voice to be sold too. 

'With a photograph and voice, potential unscrupulous businesses or individuals can be even more convincing with attempts to steal identities. 

'Also, depending upon the types of photographs and voice samples in question, it may be possible to further exploit individuals through deepfaking and similar technologies.'

The expert insists that he 'would recommend not participating in these kinds of promotions'. 

He advised: 'You have to ask yourself, is the deal too good to be true? How much value do you put on your personal information? How much will becoming a victim of fraud cost you? 

'It is easy to focus on a free cash offer but the value is never high enough to compensate for the potential damage.' 

However, the terms and conditions that are concerning people are not exclusive to Temu.

Other retailers such as Shein, McDonald's and Subway have similar small print for their competitions.

McDonald’s FANnual Report Sweepstakes competition terms and conditions say: 'By participating in the Sweepstakes, each verified winner hereby agrees and grants Sponsor the right, but not the obligation, to the use of their name, voice and likeness, along with their address (city and state)'.

Additionally, Temu's competitor Shein also have giveaways with these kinds of conditions, including: 'the winners’ consent for use of his/her Photo, name, likeness, voice, opinions, statements, biographical information'.

Temu's privacy policy states that it can share personal information with third parties such as advertisers. 

The site insists that it does not 'sell' user data - but admits that in some countries, the sharing of data is considered 'selling'.

The policy reads: 'At Temu, we care deeply about privacy. While Temu shares your personal information for the purposes of targeted advertising, which may be considered a "sale" under applicable privacy laws, Temu does not "sell" personal information in the traditional sense.'

But, cyber security expert Tom insists that this is a 'really good opportunity for people to think about what data they're giving away'.

Adrianus Warmenhoven, a cyber security expert at NordVPN, comments: 'The scheme bears all the red flags of a phishing scam, luring consumers with a dubious link promising a £50 PayPal credit. 

'But while such offers typically ring alarm bells, reports indicate some individuals have reaped substantial sums.

'Though the offer may be genuine, consumers need to understand what they are gambling with. Surrendering personal data without understanding its purpose or potential repercussions exposes them to grave risks - be it falling victim to cybercrime or identity theft.

'This costly marketing tactic employed by the Chinese online marketplace has undeniably attracted a surge of new users. However, concerns linger over Temu's past allegations of data harvesting through app malware, raising fears of data monetisation.'

She adds: 'You have to stop and ask yourself ‘Why is my data so valuable to them?’ and really consider if the deal is worth it in the long run. 

'Temu is well-known for its ‘spin the wheel’ style offers when you first open the app, but remember that the company isn’t a charity. It is hell-bent on making profits and will use your data to its full advantage.

'While the promise of a swift £50 may be tempting, the stakes of compromising sensitive information far outweigh the reward.'

After being approached by MailOnline, Temu has updated its Cash Reward campaign Terms & Conditions to clarify the limited ways Temu uses customer data - 'to publish just the name and profile picture of the consumer’s name participating in the campaign in promotional content'.

A Temu spokesperson told MailOnline: 'Like many other companies, Temu employs a variety of marketing strategies to attract new customers. 

'Our Cash Reward program offers a referral incentive – a common customer acquisition method used across industries.

'Some participants have expressed concern about the promotion's Terms & Conditions (T&Cs). 

'To reassure our customers, we've revised the T&Cs to clearly specify the minimal information used: usernames and profile pictures for referral notifications and winner announcements. 

'The previous terms and conditions had inadvertently included promotional uses that Temu does not engage in.

'At Temu, safeguarding privacy and maintaining transparency in our data practices are core values. 

'We collect minimal information solely to provide and continually enhance our services for our users. We value customers' trust and feedback. We do not and will not sell customer data.

'Temu operates under strict data privacy and security standards. Our app is independently certified by Germany's Dekra to meet the OWASP MASVS (Mobile Application Security Verification Standard), the industry standard for mobile app security.

'In addition, Temu runs a bug bounty program with the leading cybersecurity firm Hacker. One and has implemented multi-factor authentication to safeguard user access. All transactions are encrypted according to Payment Card Industry (Data Security Standard) protocols.

'Temu stands firmly against phishing and identity theft. We have taken legal action against websites and apps that impersonated our brand in order to protect our customers and ensure a secure shopping environment. 

'We are a member of the Anti-Phishing Working Group (APWG), a global coalition dedicated to fighting phishing and cybercrime, whose members include companies like Microsoft, PayPal, top cybersecurity firms Symantec and McAfee, and governmental agencies.

'Temu has never provided user data to the Chinese government, nor would it do so if asked.'

Cyber security experts have issued a warning against Chinese online marketplace megalith Temu's 'very dangerous' cash giveaway, claiming that it could lead to serious fraud. 

The retailer is offering users 'free' cash in exchange for new sign-ups - and hundreds of people are jumping on the bandwagon.

Screenshots of multiple £50 payments going into social media users PayPal accounts have been plastered across the internet, as they prompt others to make the most of the unusual deal. 

The shopping website, which sells extremely cheap goods sent directly to users from China from wholesalers, is running a promotion offering a combination of cash and store credit in exchange for new members joining up - allegedly all people need to do to start getting rewards is to get new users to click on their sign up link.

However, there are concerns that people entering the promotion could have their information 'sold' to advertisers with the giveaway being dubbed 'too good to be true'. 

MailOnline spoke to cyber security experts to find out if there are any risks associated with the controversial promotion and whether it's safe to sign up. 

Jake Moore, Global Cyber Security Advisor at ESET, warns that the cash is 'not free' and giving away your data for money can be 'very dangerous down the line'.

He explained: 'This app is effectively offering money, not for free, but it's offering money in exchange for personal data and device data.

'Most apps require some sort of data to function. It's really important to pay attention to all submissions requested by these apps.

'Some apps can be sneakier than others and some request more than others. Data is the new currency and it has been for a little while now.

'When companies trade in data, that personal data can be analysed, which might not sound too bad. But when it gets shared, it can be damaging further down the line.'

The expert added: 'In extreme cases, it can even be used for identity fraud because if that data is compromised, it can be very dangerous for those people that have given their data away.

'They have given their data away freely, so they're not being conned out of it. It will all be written down in the terms and conditions but of course, people aren't reading those. 

'They're just seeing the end goal of of being offered £50 to access that data. So I think rightly so people are beginning to question if they should have given their data away for payments.'

He explained that cybercriminals are 'very good at pretending to be whoever they want to be' and the data could allow them to know things about you they wouldn't otherwise, causing you to think they are genuine.

Jake told MailOnline: 'In theory, Temu is a Chinese app and it may be allowed to share its company data with the Chinese government. That can be a worry, because with most companies, when they say that the data won't be seen anywhere else, you can rest assured that it shouldn't be.

'But when they have different laws in different countries that may in their country legally allow access if required, then it can be a worry. 

'So, for example, criminals could get hold of that data potentially and use it to phish people. So this could be phishing emails or texts, or even voice calls where they purport to be from your bank.

'Once you let your guard down, this is where they may be able to force you into moving your money, or they might force you into handing over a password or a two-factor authentication code to them, purely because they knew some personal details about you.'

The warning comes just as the UK and US identified China as the source of a wave of cyberattacks on public figures and institutions.

The rules in the 'Cash Reward' promotion state users agree to give Temu permission to use their 'photo, name likeness, voice, opinions, statements, biographical information, and/or hometown and state' worldwide. 

Mark Wilshaw, Cyber Security Services Manager at SYTECH, also chimed into the debate.

He said: 'The level of personal information that is required to enter the giveaway, coupled with their rules leads to a risk to both privacy and security. 

'The recorded personal information can be sold to marketing companies who will then bombard you with spam contact.

'It is usual for businesses to sell some information - however, it is not normal practice for personal information such as a photograph and or a voice to be sold too. 

'With a photograph and voice, potential unscrupulous businesses or individuals can be even more convincing with attempts to steal identities. 

'Also, depending upon the types of photographs and voice samples in question, it may be possible to further exploit individuals through deepfaking and similar technologies.'

The expert insists that he 'would recommend not participating in these kinds of promotions'. 

He advised: 'You have to ask yourself, is the deal too good to be true? How much value do you put on your personal information? How much will becoming a victim of fraud cost you? 

'It is easy to focus on a free cash offer but the value is never high enough to compensate for the potential damage.' 

However, the terms and conditions that are concerning people are not exclusive to Temu.

Other retailers such as Shein, McDonald's and Subway have similar small print for their competitions.

McDonald’s FANnual Report Sweepstakes competition terms and conditions say: 'By participating in the Sweepstakes, each verified winner hereby agrees and grants Sponsor the right, but not the obligation, to the use of their name, voice and likeness, along with their address (city and state)'.

Additionally, Temu's competitor Shein also have giveaways with these kinds of conditions, including: 'the winners’ consent for use of his/her Photo, name, likeness, voice, opinions, statements, biographical information'.

Temu's privacy policy states that it can share personal information with third parties such as advertisers. 

The site insists that it does not 'sell' user data - but admits that in some countries, the sharing of data is considered 'selling'.

The policy reads: 'At Temu, we care deeply about privacy. While Temu shares your personal information for the purposes of targeted advertising, which may be considered a "sale" under applicable privacy laws, Temu does not "sell" personal information in the traditional sense.'

But, cyber security expert Tom insists that this is a 'really good opportunity for people to think about what data they're giving away'.

Adrianus Warmenhoven, a cyber security expert at NordVPN, comments: 'The scheme bears all the red flags of a phishing scam, luring consumers with a dubious link promising a £50 PayPal credit. 

'But while such offers typically ring alarm bells, reports indicate some individuals have reaped substantial sums.

'Though the offer may be genuine, consumers need to understand what they are gambling with. Surrendering personal data without understanding its purpose or potential repercussions exposes them to grave risks - be it falling victim to cybercrime or identity theft.

'This costly marketing tactic employed by the Chinese online marketplace has undeniably attracted a surge of new users. However, concerns linger over Temu's past allegations of data harvesting through app malware, raising fears of data monetisation.'

She adds: 'You have to stop and ask yourself ‘Why is my data so valuable to them?’ and really consider if the deal is worth it in the long run. 

'Temu is well-known for its ‘spin the wheel’ style offers when you first open the app, but remember that the company isn’t a charity. It is hell-bent on making profits and will use your data to its full advantage.

'While the promise of a swift £50 may be tempting, the stakes of compromising sensitive information far outweigh the reward.'

After being approached by MailOnline, Temu has updated its Cash Reward campaign Terms & Conditions to clarify the limited ways Temu uses customer data - 'to publish just the name and profile picture of the consumer’s name participating in the campaign in promotional content'.

A Temu spokesperson told MailOnline: 'Like many other companies, Temu employs a variety of marketing strategies to attract new customers. 

'Our Cash Reward program offers a referral incentive – a common customer acquisition method used across industries.

'Some participants have expressed concern about the promotion's Terms & Conditions (T&Cs). 

'To reassure our customers, we've revised the T&Cs to clearly specify the minimal information used: usernames and profile pictures for referral notifications and winner announcements. 

'The previous terms and conditions had inadvertently included promotional uses that Temu does not engage in.

'At Temu, safeguarding privacy and maintaining transparency in our data practices are core values. 

'We collect minimal information solely to provide and continually enhance our services for our users. We value customers' trust and feedback. We do not and will not sell customer data.

'Temu operates under strict data privacy and security standards. Our app is independently certified by Germany's Dekra to meet the OWASP MASVS (Mobile Application Security Verification Standard), the industry standard for mobile app security.

'In addition, Temu runs a bug bounty program with the leading cybersecurity firm Hacker. One and has implemented multi-factor authentication to safeguard user access. All transactions are encrypted according to Payment Card Industry (Data Security Standard) protocols.

'Temu stands firmly against phishing and identity theft. We have taken legal action against websites and apps that impersonated our brand in order to protect our customers and ensure a secure shopping environment. 

'We are a member of the Anti-Phishing Working Group (APWG), a global coalition dedicated to fighting phishing and cybercrime, whose members include companies like Microsoft, PayPal, top cybersecurity firms Symantec and McAfee, and governmental agencies.

'Temu has never provided user data to the Chinese government, nor would it do so if asked.'

Cyber security experts have issued a warning against Chinese online marketplace megalith Temu's 'very dangerous' cash giveaway, claiming that it could lead to serious fraud. 

The retailer is offering users 'free' cash in exchange for new sign-ups - and hundreds of people are jumping on the bandwagon.

Screenshots of multiple £50 payments going into social media users PayPal accounts have been plastered across the internet, as they prompt others to make the most of the unusual deal. 

The shopping website, which sells extremely cheap goods sent directly to users from China from wholesalers, is running a promotion offering a combination of cash and store credit in exchange for new members joining up - allegedly all people need to do to start getting rewards is to get new users to click on their sign up link.

However, there are concerns that people entering the promotion could have their information 'sold' to advertisers with the giveaway being dubbed 'too good to be true'. 

MailOnline spoke to cyber security experts to find out if there are any risks associated with the controversial promotion and whether it's safe to sign up. 

Jake Moore, Global Cyber Security Advisor at ESET, warns that the cash is 'not free' and giving away your data for money can be 'very dangerous down the line'.

He explained: 'This app is effectively offering money, not for free, but it's offering money in exchange for personal data and device data.

'Most apps require some sort of data to function. It's really important to pay attention to all submissions requested by these apps.

'Some apps can be sneakier than others and some request more than others. Data is the new currency and it has been for a little while now.

'When companies trade in data, that personal data can be analysed, which might not sound too bad. But when it gets shared, it can be damaging further down the line.'

The expert added: 'In extreme cases, it can even be used for identity fraud because if that data is compromised, it can be very dangerous for those people that have given their data away.

'They have given their data away freely, so they're not being conned out of it. It will all be written down in the terms and conditions but of course, people aren't reading those. 

'They're just seeing the end goal of of being offered £50 to access that data. So I think rightly so people are beginning to question if they should have given their data away for payments.'

He explained that cybercriminals are 'very good at pretending to be whoever they want to be' and the data could allow them to know things about you they wouldn't otherwise, causing you to think they are genuine.

Jake told MailOnline: 'In theory, Temu is a Chinese app and it may be allowed to share its company data with the Chinese government. That can be a worry, because with most companies, when they say that the data won't be seen anywhere else, you can rest assured that it shouldn't be.

'But when they have different laws in different countries that may in their country legally allow access if required, then it can be a worry. 

'So, for example, criminals could get hold of that data potentially and use it to phish people. So this could be phishing emails or texts, or even voice calls where they purport to be from your bank.

'Once you let your guard down, this is where they may be able to force you into moving your money, or they might force you into handing over a password or a two-factor authentication code to them, purely because they knew some personal details about you.'

The warning comes just as the UK and US identified China as the source of a wave of cyberattacks on public figures and institutions.

The rules in the 'Cash Reward' promotion state users agree to give Temu permission to use their 'photo, name likeness, voice, opinions, statements, biographical information, and/or hometown and state' worldwide. 

Mark Wilshaw, Cyber Security Services Manager at SYTECH, also chimed into the debate.

He said: 'The level of personal information that is required to enter the giveaway, coupled with their rules leads to a risk to both privacy and security. 

'The recorded personal information can be sold to marketing companies who will then bombard you with spam contact.

'It is usual for businesses to sell some information - however, it is not normal practice for personal information such as a photograph and or a voice to be sold too. 

'With a photograph and voice, potential unscrupulous businesses or individuals can be even more convincing with attempts to steal identities. 

'Also, depending upon the types of photographs and voice samples in question, it may be possible to further exploit individuals through deepfaking and similar technologies.'

The expert insists that he 'would recommend not participating in these kinds of promotions'. 

He advised: 'You have to ask yourself, is the deal too good to be true? How much value do you put on your personal information? How much will becoming a victim of fraud cost you? 

'It is easy to focus on a free cash offer but the value is never high enough to compensate for the potential damage.' 

However, the terms and conditions that are concerning people are not exclusive to Temu.

Other retailers such as Shein, McDonald's and Subway have similar small print for their competitions.

McDonald’s FANnual Report Sweepstakes competition terms and conditions say: 'By participating in the Sweepstakes, each verified winner hereby agrees and grants Sponsor the right, but not the obligation, to the use of their name, voice and likeness, along with their address (city and state)'.

Additionally, Temu's competitor Shein also have giveaways with these kinds of conditions, including: 'the winners’ consent for use of his/her Photo, name, likeness, voice, opinions, statements, biographical information'.

Temu's privacy policy states that it can share personal information with third parties such as advertisers. 

The site insists that it does not 'sell' user data - but admits that in some countries, the sharing of data is considered 'selling'.

The policy reads: 'At Temu, we care deeply about privacy. While Temu shares your personal information for the purposes of targeted advertising, which may be considered a "sale" under applicable privacy laws, Temu does not "sell" personal information in the traditional sense.'

But, cyber security expert Tom insists that this is a 'really good opportunity for people to think about what data they're giving away'.

Adrianus Warmenhoven, a cyber security expert at NordVPN, comments: 'The scheme bears all the red flags of a phishing scam, luring consumers with a dubious link promising a £50 PayPal credit. 

'But while such offers typically ring alarm bells, reports indicate some individuals have reaped substantial sums.

'Though the offer may be genuine, consumers need to understand what they are gambling with. Surrendering personal data without understanding its purpose or potential repercussions exposes them to grave risks - be it falling victim to cybercrime or identity theft.

'This costly marketing tactic employed by the Chinese online marketplace has undeniably attracted a surge of new users. However, concerns linger over Temu's past allegations of data harvesting through app malware, raising fears of data monetisation.'

She adds: 'You have to stop and ask yourself ‘Why is my data so valuable to them?’ and really consider if the deal is worth it in the long run. 

'Temu is well-known for its ‘spin the wheel’ style offers when you first open the app, but remember that the company isn’t a charity. It is hell-bent on making profits and will use your data to its full advantage.

'While the promise of a swift £50 may be tempting, the stakes of compromising sensitive information far outweigh the reward.'

After being approached by MailOnline, Temu has updated its Cash Reward campaign Terms & Conditions to clarify the limited ways Temu uses customer data - 'to publish just the name and profile picture of the consumer’s name participating in the campaign in promotional content'.

A Temu spokesperson told MailOnline: 'Like many other companies, Temu employs a variety of marketing strategies to attract new customers. 

'Our Cash Reward program offers a referral incentive – a common customer acquisition method used across industries.

'Some participants have expressed concern about the promotion's Terms & Conditions (T&Cs). 

'To reassure our customers, we've revised the T&Cs to clearly specify the minimal information used: usernames and profile pictures for referral notifications and winner announcements. 

'The previous terms and conditions had inadvertently included promotional uses that Temu does not engage in.

'At Temu, safeguarding privacy and maintaining transparency in our data practices are core values. 

'We collect minimal information solely to provide and continually enhance our services for our users. We value customers' trust and feedback. We do not and will not sell customer data.

'Temu operates under strict data privacy and security standards. Our app is independently certified by Germany's Dekra to meet the OWASP MASVS (Mobile Application Security Verification Standard), the industry standard for mobile app security.

'In addition, Temu runs a bug bounty program with the leading cybersecurity firm Hacker. One and has implemented multi-factor authentication to safeguard user access. All transactions are encrypted according to Payment Card Industry (Data Security Standard) protocols.

'Temu stands firmly against phishing and identity theft. We have taken legal action against websites and apps that impersonated our brand in order to protect our customers and ensure a secure shopping environment. 

'We are a member of the Anti-Phishing Working Group (APWG), a global coalition dedicated to fighting phishing and cybercrime, whose members include companies like Microsoft, PayPal, top cybersecurity firms Symantec and McAfee, and governmental agencies.

'Temu has never provided user data to the Chinese government, nor would it do so if asked.'

Cybersecurity has long been a fast-moving field. However, the pace of innovation is escalating and therefore presents a double-edged sword – as cybersecurity best practice evolves, so too does the technology and sophistication of attacks.

Ransomware attacks dominated the news in 2023 and continued in 2024, thanks to high-profile cyber-attacks on large organizations such as MGM Resorts in September 2023, which impacted the company’s third quarter financial results by $100m.

As eye-catching as incidents like these are, there is only so much they can tell us about best cybersecurity practice. All organizations have different priorities, structures and critical assets, which not only affects what cybersecurity measures should be put in place, but – more importantly – how these measures may come under attack.

The most predictable thing about hackers is that they are unpredictable and highly dynamic, and they will target a business’s weak points whenever possible. 

No two organizations are the same, and the same applies to their potential vulnerabilities. Considering that the cost of an average data breach is $4.45m and its average identification and containment time is 277 days, putting bespoke security measures in place should be an essential part of any business’s operations.

The Human Factor

Most companies are now aware that they need appropriate cybersecurity measures in place, but there may be a perception gap in what constitutes effective security. For example, while it is best practice to invest in a managed Security Information and Event Management (SIEM) service to allow for better detection, analysis and response to security events and threats, it needs to be configured appropriately with analytics engines to generate effective results and insights.

The same applies to managed threat detection and response offerings, otherwise known as Security Operations Center (SOC) as a Service. Though these services are often built around automation-supported tooling, they require careful calibration to ensure the right notifications and potential issues are being flagged to appropriate stakeholders.

Regardless of whether organizations choose to insource or outsource their security monitoring capability, continuous and effective human input is essential. Security monitoring’s automated capabilities may cause it to swamp the stakeholder with meaningless event notifications, devoid of context and potential next steps.

Without security teams applying critical thinking across the affected organization’s environment and IT systems, these indexed events cannot be effectively tracked and recorded, and their threat level assessed. If this cannot be done, the continuous assurance model that underpins security monitoring no longer applies.

But emphasizing this human factor does not mean that tools such as automation, machine learning and AI have no place being part of security monitoring and incident response capability. They are vital to helping manage analyst workloads.

However, the level of automation adopted within an organization can vary and is largely dependent on the company’s level of maturity with cybersecurity practices. For businesses taking their first steps with the technology, only high-confidence processes and extremely common events should be automated or receive an automatic response.

Yet how these processes and events are defined may also differ from company to company. This variation further emphasizes the importance of the human factor when establishing effective cybersecurity protocols, including what constitutes a more complex event that may require human intervention to resolve.

These distinctions should be established extremely early on when setting up a company’s security monitoring capabilities – preferably on day one. Following this, any incident response plans should be updated on an ongoing basis.

As all organizations have their unique priorities and organizational nuances, a one-size-fits-all solution does not exist for any company. Cybersecurity plans should reflect this, with cybersecurity expertise being applied where necessary to adapt existing practices to reflect changing circumstances.

How to Integrate Expertise

Demand for cybersecurity skills and talent continues to grow in response to increases of cyber threats, and many businesses may simply lack the appropriate expertise or availability of key personnel, leaving their systems vulnerable.

Leveraging third-party expertise to work closely within existing organizational structures can support with critical thinking, interpretation of historic business data and hands-on remediation. Bringing these data-driven insights to life is crucial to continuous assurance and effective incident prevention and response.

Looking for consultancies with accreditations from independent cybersecurity bodies such as CREST can help distinguish best possible service. Identifying whether the company in question offers red teaming services provides another benchmark of quality. As a covert assessment allowing organizations to simulate and – crucially – react to real adversaries, leveraging this sort of in-the-field experience may be more valuable in incident response than focusing on tools and software alone.

With expert support, events flagged from networks, infrastructure, applications, end-user interaction, cloud environments or identity and access management software can be more easily categorized depending on their urgency.

Using this method, what could potentially be millions of events can be whittled down to thousands of alarms, hundreds of cases needing possible investigation, and then tens of actual, identified incidents requiring intervention. A funnel-based approach, informed by expertise, provides a clear way to cut through the noise and identify where possible threats are.

An Informed Response

Detection is only part of the incident remediation process – response is vital and is often lacking when cybersecurity is based on technology and automation alone. A common issue in cybersecurity is that while response time is a vitally important metric when incidents occur, it is not always clear what a ‘response’ involves.

Sometimes it can simply mean the issue has been detected, which may be insufficient for businesses lacking the in-house expertise to react swiftly to potential data breaches. Instead, they may be left scrambling for quick fixes for an urgent issue, which they may not be able to fully resolve. For cybersecurity provision to be truly effective, a holistic, joined-up approach is required that includes incident preparation, eradication and remediation.

Incident response plans are often a pressure point for many organizations, as they can be completed and not updated afterwards to account for new technologies, or important contacts leaving, joining or moving within the company.

Without this key information, solving potential incidents becomes like trying to navigate without a map, and underlines why the human factor remains so crucial to cybersecurity. It is therefore pressing that the plan is updated yearly as a matter of course to avoid these potential issues.

This sort of human input is vital to all areas of cybersecurity practice and should not be overlooked as technology marches on. Where cybersecurity is concerned, a once-a-year image of risk is no longer enough. Organizations need continuous assurance to move at the same pace as the risk landscape, provided by experts well-versed in global trends including ESG, cybersecurity and supply chain integrity, which are defining the new era of risk management – the era of Assurance 4.0.

So while other software and automation tools can streamline processes and should be used where appropriate, they are not a silver bullet. Instead, cybersecurity consultancy should work in tandem with these digital services to achieve the desired result – a secure IT environment.