Cyber ​​incidents and strategies for their prevention

Strategies for preventing future cyberattacks represent an integrated set of measures and procedures that combine technological tools, the human factor, and organisational processes to reduce risks and strengthen resilience to threats.

• Technology – includes the use of advanced security solutions such as firewalls, intrusion detection and prevention systems (IDS/IPS), antivirus tools, data encryption, multi‑factor authentication (MFA), and systems for monitoring and analysing network traffic. These tools help with early detection and blocking of potential attacks.
• People – involves continuous education of employees, students, and users about threats, security practices, and recognising attack attempts such as phishing or social engineering. The human factor is often the weakest link, so awareness and knowledge play a crucial role in prevention.
• Organisation – refers to establishing clear security policies, procedures, and protocols for responding to cyber incidents, conducting regular risk assessments, testing security systems, and planning business continuity and disaster recovery (BCP/DRP). Well‑structured organisational measures ensure a coordinated and timely response.

By combining these three aspects — technology, people, and organisation, it is possible to build a comprehensive security framework that not only provides a ready response to threats but also proactively prevents them. These measures include:

• regular updating of systems and applications,
• the use of strong passwords and two‑factor authentication (2FA),
• educating all users and raising awareness of cyber threats,
• regularly creating backups on physically separate devices,
• applying the principle of least privilege,
• using firewalls, antivirus protection, and monitoring systems,
• encrypting data (at rest, in processing, and in transit),
• establishing an effective incident response plan,
• regularly reviewing all of the above measures.

Sources that provide guidance and recommendations for strategies to prevent future cyber incidents:

- National CERT
- National Cyber Security Centre (NCCS) 
- Personal Data Protection Agency (AZOP) 
- European Union Agency for Cybersecurity (ENISA)