Data security is like exercising and eating vegetables. Everyone understands the importance of data security (and eating vegetables) but few of us get enough. There's no question that each one of us has at some point said or thought the following when discussing data security:
No matter how careful we are about security software and no matter how secure our network infrastructure might be, at the end of the day, there is still one major vulnerability, and that one major weakness is ourselves. Often, users unintentionally do, say, or share certain things that leave them exposed to cybercrime. National Cyber Security Awareness month, observed in October, was established to educate people on their own role and responsibilities in staying cyber safe and secure.
Here are a few tips to help your team improve their data security habits.
There are no small fish in this ocean! Everyone and every business, big or small, is at risk of being a target. Changing this “not me” mindset is the first and most crucial step in keeping yourself and your team better protected from cybercriminals. Cyber awareness campaigns are worth their weight in gold.
Keep your devices on your person at all times in public settings, and if not on you, make sure it is locked. This includes your laptop, tablets, smartphones and any other mobile device. Keep your sensitive data on USB keys that you always carry with you, or store your data on an external hard drive that you can keep at home.
Don't use the same password for every account, and don't use only letters. Use both upper and lower case letters, numbers, or characters. Aim for longer passwords—experts recommend at least 20 characters. Change your passwords periodically and store them somewhere safe at home—don't keep your passwords in your phone!
Don't follow links on unknown or suspicious websites, and certainly don't click on any links you get in an email that isn't clearly from a trusted source. Pro tip: when someone sends you a blank email with just a link in the body, do not click under any circumstances! In those cases, it is almost certain that the recipient could be hacked. These fraudulent links often lead to malicious websites that contain malware which can infect your computer and access your sensitive data.
Cybercriminals are getting more sophisticated in their tactics and have taken to exploiting their targets by manipulating them on a psychological level. Spear phishing attacks rely on gaining a person's trust on a personal level and getting the victims to let down their guard. Criminals pose as authority figures or reputable vendors or co-workers over email or the phone to manipulate their victims into acting without fully thinking.
Keeping up to date on cyberattack trends can be tedious, but—drawing back to our first major tip—maintaining a healthy level of suspicion when responding to emails or calls makes all the difference. Pause and consider all angles before you offer information, even if it seems harmless.
We all do it—we get notifications to update software but we are in the middle of something so we click to put it off. Maybe the update is just delayed for a couple of hours but more often it is a day, a week or even months. The next time we are prompted, we might even decline. It seems like an inconvenience but it is important to always update your software. Updates contain patches for newly discovered vulnerabilities and keep your software running at full capacity.
Most people have at least one social media account. Multiple social media accounts when taken all together can paint a pretty complex and accurate depiction of your life. Social media platforms like LinkedIn can be especially easy to exploit. Take caution with what you share online, keep your pages private and accept only friend requests that are from people you know.
In conclusion, these data security tips can really help with your overall cybersecurity protection. It is easy to be caught off guard but following a few safe cyber practices can go a long way to ensuring that your data is kept safe and secure.