094 90 48200     Get SUPPORT

Aniar IT Services Blog

By accepting you will be accessing a service provided by a third-party external to https://www.aniar.ie/

Tip of the Week: Your Cybersecurity To-Do List

Tip of the Week: Your Cybersecurity To-Do List

It is a well-established and widely-known fact that your employees are some of the biggest threats to your business via the technology that they use each and every day. If your employees aren’t aware of the practices and policies that they need to follow to prevent these threats, you could find yourself in an unpleasant position. Here, we’ll review four categories of cybersecurity basics that everyone in an organization should abide by, and some tips to support each.

Preventing Phishing

Phishing has been becoming more and more of a favorite tactic by hackers, meaning that you and your employees need to look at any messages that come in via your email (or other solutions) with a critical eye. Here are some practices to help you minimize the influence of phishing on your business:

  • Watch for “Urgent” messages (or, for that matter, “URGENT!!!!!!” ones). Many phishers will try to manufacture urgency to make sure you click without taking a moment to consider it may be an attack. Resist this knee-jerk response.
  • Review in detail. Many phishing messages show distinct warning signs, such as blatant spelling or grammar errors (but this may just be the person you’re talking to as well). You can find other, more reliable signs by giving any links or the email address of the sender the “hover” test. Without clicking on anything, hover your cursor over the links and a small pop-up box will appear. This box will show you the address that really sent the email, or the link that you would actually be redirected to. Check to make sure all the details are kosher. For these reasons, it’s recommended that you don’t click on any links in emails. Instead, retype the URL into your web browser.
  • Double-check with the sender. If you have access to another means of communication with the supposed sender of an email, reach out to them using that other means to confirm that they sent it. If they didn’t, it’s a pretty safe bet that the email is fraudulent.
  • When in doubt, assume the worst. If you just aren’t sure how legitimate a given email is, don’t click around in it. Assume that it is a phishing attempt, and report it to your IT provider.

Establishing Safe Browsing Habits

Unfortunately, there are plenty of threats that reside online, and it is only too easy for a user to unwittingly allow them in. Make sure your users abide by the following policies to minimize the threats you’ll potentially need to deal with.

  • Think before you click. Similarly to links found in emails, there are plenty of opportunities online to let in a threat. Consider what you’re clicking on before you do so. (The “hover” trick works well here too… check out the bottom of the window.)
  • Reserve business computers for business purposes. Non-work-related browsing can bring users to websites that can host threats without the user realizing. Discourage your users from surfing the web, downloading content, and doing other things online unless they are work-related.
  • Moderate access. Use firewalls and content filtering to keep unwanted content off of your network, and users from accessing unwanted content, respectively.
  • Trust your IT resource. If you are even the slightest bit unsure about something, whether it’s a program you’ve been prompted to install or making sure your settings are focused on maintaining security, reach out to IT for assistance.

Enforcing Strong Passwords

It seems that everything requires a password these days, which makes it all the more important that you and your users are aware of how to keep them safe - especially in the workplace.

  • Don’t recycle passwords. Once a password has been used and replaced, it is best to not use it again - this is why you’ll often find a “you have used this password too recently” message if you attempt to use it again within a certain timeframe. This is the same reason that passwords should not be used for more than one account - if that password is compromised, you’ve just lost control of multiple accounts.
  • Avoid easily-guessed passwords. As a way to try and come up with a password that is easy to remember, many people will resort to using common elements in their password - pet names, maiden names, birthdays or anniversaries - or use a simple phrase or a string of numbers. The entire point of a password is to make it so that others are unable to access one of your accounts, so making it something that can be guessed is counter-productive.
  • Consider leveraging passphrases instead. Passphrases are not only typically more secure than a password, they also have a tendency to be more memorable. Let me ask you this… which of these two would you find more memorable, “F4njUJ29S5” or “pearquiethigh?” You can also use basic substitution to make you passphrase more secure, turning our example into “pe@rqu!e+h!gh” instead.
  • Use a password manager. One of the main reasons that people reuse passwords so often and neglect to change them is the fact that they are scared of forgetting them. A password manager can help reduce this by securely saving all of your different passwords behind one master password. 

Protecting Your Business’ Data

Finally, there are many threats out there to your business’ data - including any you have on your clients or your employees. You have a responsibility to yourself, as well as these clients and employees, to make sure that this data is as secure as possible.

  • Make sure your business’ data is backed up. There are so, so, so many ways that your business could lose its data. While it may be attacked, it could just as (if not more) easily be lost due to equipment failure, user error, weather conditions… the list goes on and on. If your on-site data is lost, you will want to make sure you have an up-to-date copy squirreled away in the cloud to reference.
  • Protect your assets with access control. You need to be concerned about both the security of your digital files, and of your actual business location. If you’re using multi/two-factor authentication to secure your online resources, or requiring identity confirmation in order to enter certain areas of the business… you need to be doing both.
  • Maintain your security solutions. The thing about security software is that it isn’t something that you can just set up and count on indefinitely. Attackers are always examining these solutions to find vulnerabilities, so it is important that you regularly update and patch the ones you use to keep them safe. Every solution you have should actually be set up with security in mind. A glaring example is your company’s wireless. Not only should that be secured with a password, it should be hidden away from outside users.
  • Keep your payment options compliant. For your sake, and the sake of your clients, you should make sure your business is compliant to whatever regulatory standards that apply to it… including the Payment Card Industry Data Security Standard (PCI DSS).

Following these guidelines is a great start to ensuring your company’s security. Aniar IT Services can help get you this far, and beyond. Reach out to us at 094 90 48200 to learn more about what we can do.

Why Your Technology Needs Upkeep, Updates, and Upg...
Microsoft Releases Rare Bug Fix Off of Regular Pat...


No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Thursday, June 04 2020

Captcha Image

Mobile? Grab this Article!

QR-Code dieser Seite

Tag Cloud

Tip of the Week Security Technology Business Computing Productivity Best Practices Cloud Privacy Innovation User Tips Workplace Tips Hosted Solutions Email Network Security Internet IT Support Efficiency Microsoft Data Software Hackers Google Data Backup Hardware Data Recovery Communication Small Business Tech Term Managed IT Services Cloud Computing Business Smartphones Communications Collaboration IT Services Phishing Windows 10 VoIP Mobile Devices Cybersecurity Gadgets Android Backup Computer Business Continuity Users Mobile Device Malware Network Browser Saving Money Artificial Intelligence Smartphone Outsourced IT Disaster Recovery Business Management Miscellaneous Internet of Things Windows Information Managed Service Facebook Upgrade Spam BDR Server Office 365 Router Social Media Chrome How To Passwords Windows 7 Blockchain Automation Microsoft Office BYOD Paperless Office Holiday Word Cybercrime Computers Applications Networking Bandwidth Staff Apps Data Breach Vulnerability Operating System Remote Work Patch Management Data Protection Save Money Telephone System Ransomware Remote Monitoring Connectivity Settings Virtualization Data Security Money Display Mobile Device Management Data Storage Managed IT Encryption Two-factor Authentication Infrastructure Wi-Fi Human Resources History Quick Tips Spam Blocking Botnet Augmented Reality VPN Processor Password Virtual Assistant Managed IT services Bring Your Own Device Government Redundancy Voice over Internet Protocol Vendor Management IT Management Business Technology Telephone Systems App Meetings Health Social Engineering HIPAA Google Drive Avoiding Downtime Big Data Servers Website Education Managed Services Provider Identity Theft Comparison Vendor Procurement Private Cloud IT Plan Help Desk Google Docs OneNote Access Control Digital Signage Law Enforcement Sports Machine Learning Cryptocurrency Telephony Employee/Employer Relationship CES Unsupported Software Software as a Service Scam Training Fraud Business Intelligence Update Keyboard Content Management Shortcuts Hypervisor Remote eWaste Thought Leadership Remote Worker Database Telecommuting Manufacturing Computing Amazon Computer Care Copiers Cortana Alert Save Time 5G Remote Workers FENG Microchip Investment Printing Charger Hosted Computing Smartwatch Skype Peripheral Wireless Internet Document Management Camera Outlook Enterprise Content Management Mobility Hacker Going Green Legal Wiring Travel The Internet of Things Virtual Reality Professional Services Amazon Web Services Accountants Hard Drive Development Password Manager Nanotechnology Proactive IT Tools Work/Life Balance Managed IT Service Search Engine ROI Personal Wireless Charging Inventory Start Menu Project Management Quick Tip USB Solid State Drive Printers Frequently Asked Questions Recovery Downtime Password Management Social Sync Multi-Factor Security Saving Time Office Criminal Windows 10s Firewall Cabling Fiber Optics Bing WiFi Messaging Business Mangement Smart Tech Screen Mirroring MSP Net Neutrality Millennials Digital Signature GDPR Digitize Google Apps Employer-Employee Relationship Employee Bitcoin Electronic Medical Records Wire Audit Physical Security Entertainment Warranty Excel Root Cause Analysis NIST Mobile Office Supply Chain Management Addiction Unified Threat Management Cables Trend Micro Online Shopping HVAC Flash SMS Gmail Cast File Sharing ISP Value Workforce OLED Using Data Credit Cards PDF Remote Computing IT Assessment Workers Compliance Specifications Wireless Batteries Data Management Printer Tip of the week Evernote Cleaning Trending Managed Services Public Cloud Mobile Computing Default App Shopping HaaS Virtual Machine AI Recycling Devices Cryptomining Biometric Security Information Technology Windows Server 2008 R2 OneDrive Authentication Data loss Google Search Virtual Private Network Computer Fan YouTube Mouse Windows Server 2008 Practices Safe Mode Security Cameras Covid-19 Cache Software Tips Smart Office HBO IT Infrastructure Social Network CrashOverride Tech Support Emergency Wireless Technology Company Culture Safety IBM Marketing Productivity Managed Service Provider Budget Managing Stress Hiring/Firing Competition Customer Relationship Management IP Address Twitter Personal Information Fun Customer Service Financial Domains Hard Drives Windows 10 Public Speaking Search Regulation Presentation Lithium-ion battery