Check that antivirus, firewalls, endpoint protection, and other security tools are current and properly licensed. Replace outdated tools with better-performing or more secure alternatives.
Byte-Sized Security
Logging into apps or websites with your social media account can increase your risk if that account is compromised. Use separate, strong credentials for each service.
Maintain an up-to-date inventory of all hardware, software, and cloud assets. This helps with patching, licensing, and risk management.
Cute as they are, details about your pet’s name or breed might be the answers to your security questions. Protect your furry friends and your accounts by keeping some secrets!
All visitors should be signed in, wear a visitor badge, and be escorted at all times. This reduces the risk of unauthorized access to sensitive areas.
Ensure backups are running as scheduled and perform a test restore to validate data integrity. Confirm that critical systems can be restored within acceptable timeframes.
Lock laptops, tablets, and other devices in drawers or cabinets when not in use. Don’t leave electronics unattended in public or shared areas.
If a coworker emails asking for sensitive data, gift cards, or wire transfers, confirm the request through another method (like a phone call). Their account could be compromised.
Even if you delete a post, screenshots or archives may still exist. Always consider how your content could be used or misinterpreted before sharing.
Connect to your company’s network using a VPN to encrypt your internet traffic. This helps protect sensitive data from being intercepted.
Don’t let spam pile up—clean it out like you would your room, or you might miss the “monster under the bed” (aka a phishing scam). Stay organized and keep the creepy crawlies away.
Scan networks, systems, and applications for vulnerabilities at least once a year. Consider a third-party penetration test to uncover security gaps before attackers do.
Keep sensitive areas, storage units, and filing cabinets locked when not in use. This helps protect confidential documents and equipment from theft or unauthorized access.
Phishing can happen on social media through messages or posts that contain malicious links. If something seems off, don’t click — report and block instead.
Review applicable laws (e.g., GDPR, HIPAA, CCPA, PCI-DSS) to ensure your organization remains compliant. Update policies and practices to reflect any changes in the legal landscape.
Attackers may use fear, urgency, or flattery to manipulate you. If a caller insists on secrecy or tries to rush you into action, it’s likely a scam.
If a deal sounds like it’s from a fairy tale, it’s probably a trapdoor. Don’t click shiny links promising a free unicorn or cash—you’ll only get digital trolls instead.
Only allow one person per access badge entry—no holding doors open for others. This ensures that every person entering is properly authenticated.
Review employee access rights to systems and data to ensure they follow the principle of least privilege. Remove access for former employees or those who’ve changed roles.
Scammers may create fake profiles to impersonate people you know or trust. Always verify friend or connection requests before accepting.
