The Darkweb is a Big Data goldmine for hackers. You can learn a great deal about your colleagues, friends, neighbors, suppliers, contractors, customers and competitors by monitoring their domains, email addresses, names, infrastructure and more.
You can train your people to be cybersecurity aware, teach them internet hygiene, buy all the cybersecurity tech on the market. But hackers are on LinkedIn, monitoring Facebook. Darkweb Predators are hunting for prey and they understand people better than defense tech coders understand people.
Bad Actors also code better than defense tech coders. They understand how defensive technology works, as well as how people, companies, employees, contractors think, act and respond.
Strengths, Weaknesses. Opportunities. Threats.
Cybersecurity requires a holistic approach from CISOs and the C Suite. A key building block is to run a SWOT analysis of your organization as it appears to hackers. Look at yourself from the outside. This requires involvement from HR, Finance, Operations, Development, Shipping. Tabletop exercises, wargaming – however you want to describe it. Sure, you can get pen testers in, but then it becomes a technical cybersecurity exercise: you want to get the rest of the organization on board.
Start by investigating cyberthreat intelligence vendors, like Culet Security, so that you know what hackers know about you and your organization. See What Hackers See.
You’ll be surprised at how much you learn from darknet monitoring: the more you learn, the easier it gets to think like a hacker.
HHP - Hackers Hack People 