What is brand risk protection and why does it matter?
Today’s security professionals have become familiar with the idea that every organization has an attack surface that describes its global exposure to threats against internal and cloud applications, devices, users, and data.
The attack surface grows as greater connectivity, cloud applications and myriad new types of device are adopted as an organization expands its digital footprint. It follows that when a security team calculates an organization’s attack surface, what they are really doing is estimating its vulnerability to cyberattack.
However, the idea of the attack surface isn’t always terribly helpful because it assumes that an organization has the tools to understand its true size. As countless successful cyberattacks demonstrate, organisations often discover after the fact that their attack surface was larger than they’d realized.
Brand Risk Protection (BRP)
One issue is that parts of the attack surface are easy to miss because they exist in the public sphere beyond the traditional responsibility of the IT department. It is these sorts of vulnerabilities Brand risk protection (BRP) services are designed to detect and address.
Broadly speaking, BRP defends an organization’s brand and the way this can be manipulated, exploited, and hijacked to deceive customers. It’s a huge and expanding area that includes discovering assets, monitoring for threats, remediating attacks, and managing the organizational processes involved in doing this. The main areas include:
Domain protection – a way of monitoring an organization’s web domains, now routinely targeted by typo-squatters (lookalike web names called homoglyphs) and domain/subdomain impersonation. This has been a problem for many years and is the bedrock of phishing attacks as well as copycat domains selling fake merchandise.
Brand and social media protection – monitoring the web and social media channels for brand impersonation using lookalike or hijacked accounts which abuse trademarks, logos, employees, and brand imagery.
Phishing detection – monitoring threat intelligence, domain registrations and MX record changes for information on phishing campaigns targeting an organization’s employees or customers.
Data leaks – data and credentials stolen from customers, or lists of fake and hijacked accounts, now flood the dark web, deep web, and Telegram channels, where they are traded back and forth. In many cases, organisations are not aware this data has even been taken, which makes DRP detection useful intelligence.
Account, VIP, and social media protection – monitors for stolen and fake employee accounts on channels such as Facebook, Twitter, LinkedIn, and Instagram.
Fake mobile apps – once rare, the use of lookalike mobile apps has grown with their importance to customers. Often served from third-party app stores, these can be difficult to spot.
Disinformation, misinformation, and fake news – an area of growing concern is false information planted to damage a brand’s reputation. A 2019 study by the University of Baltimore estimated that disinformation now costs the global economy $78 billion each year, with even one negative article on a search pages causing a 22% loss of business. Campaigns can also be used to alter a company’s stock price. Disinformation used to be politically or nationally focused but is increasingly being used against businesses for reasons of economic advantage.
What unites all BRP categories is that they are almost impossible to detect using conventional security tools. When they are detected, it is often by employees in departments beyond IT, for example a marketing department that receives complaints about brand impersonation. If an abuse is not detected or is detected by someone without the means to do anything about it, this type of abuse can slowly proliferate.
How does BRP work?
BRP is usually offered as a suite of integrated tools which detect risks using a mixture of automated machine intelligence, threat feeds, and manual processes. The nature of monitoring depends on the threat being assessed. Domain abuse is carried out by analyzing registered domains for ones that look similar to protected domains. Protecting brands is basically the same process conducted on social media or the web, or by constantly searching for specific brand images, product names, email addresses, or leaked credentials.
What distinguishes one BRP system from another is the effectiveness of the remediation features on offer. This can be a complex undertaking because once detected each must be tackled individually and that involves managing a detailed task workflow over extended periods of time.
Ideally, the BRP service should offer a single view of the risks being tracked, with the tools to take down or report counterfeit sites and content, liaising with law enforcement where appropriate. It’s also important that the service can accommodate non-technical employees in departments such as marketing who are increasingly being given the job of tracking brand abuse and disinformation.
Conclusion: don’t ignore brand risks
Perhaps the biggest innovation of BRP is really that it brings together a suite of capabilities that have existed in an ad-hoc way for years, but which weren’t integrated couldn’t scale as abuse increased. Managing digital risks in this informal way is expensive and is bound to miss problems. Integrating BRP mitigation in a single platform is the simplest way to make abuse visible to an entire organization.
Introduction: Cryptocurrencies have exploded in popularity in recent years. Driving mainstream adoption are crypto exchanges – online platforms that allow investors to easily buy, sell, and trade digital currencies like Bitcoin and Ethereum. Crypto exchanges provide the critical infrastructure that allows individuals and institutions seamless entry into the crypto ecosystem. But how exactly do these […]
Introduction: The “Preparing automatic repair” loop is a common issue that affects Windows 10 and 11 users when the operating system fails to boot properly. This automatic repair process tries to diagnose and fix boot issues but often gets stuck repeatedly restarting and checking for problems, creating an endless loop. There are several potential causes […]
Table Of Contents: Introduction What is Disk Partitioning Why is disk partitioning needed? How to do disk partitioning? Best Disk Partition Software for Windows 11/10/8/7 in 2024 EaseUS Partition Master MiniTool Partition Wizard Pro Paragon Partition Manager AOMEI Partition Assistant Active@ Partition Manager Tenorshare Partition Manager GParted Cute Partition Manager Macrorit Partition Expert IM-Magic Partition […]
Introduction: Using a Mac password manager app is one of the best ways to stay secure online. A good password management app generates strong, unique passwords for all your accounts, remembers them for you, and helps you log in quickly and easily. When choosing a password manager for your Mac, you’ll want one that is […]
Introduction: Managing passwords is a major challenge in the digital era. With the proliferation of online accounts, we’re expected to create and remember many complex, unique passwords. This poses a significant burden on our memory. Fortunately, Android password managers offer a convenient solution. These applications store passwords securely, generate strong random passwords, and auto-fill login […]
Introduction: Having strong and unique passwords for all your online accounts is essential for good digital security and privacy. Reusing the same passwords on multiple sites is a risky practice as a breach on one site puts all your accounts at risk. This is where a dedicated password manager comes in very handy. These apps […]
Introduction: In today’s digital age, we have loads of accounts – like email, social media, online banking, and shopping sites. That means we’ve got tons of passwords to remember. It’s risky to use the same password for everything, but keeping track of unique ones for each account can be tough. A password manager proves invaluable […]
Introduction: A clean and optimized Android device performs better, lasts longer, and runs faster. With time, caches, residual files, and unneeded data can clutter up your Android smartphone or tablet and slow it down. That’s why having a quality cleaner app is essential. The Google Play Store has hundreds of Android cleaner and optimization apps […]
The mobile gaming industry has experienced exponential growth, with an increasing number of users turning to their Android devices for immersive gaming experiences. With this surge in mobile gaming, the demand for efficient and effective apps to boost Android gaming has also risen. Game optimizer apps are designed to optimize the performance of Android devices, […]