If a deal sounds like it’s from a fairy tale, it’s probably a trapdoor. Don’t click shiny links promising a free unicorn or cash—you’ll only get digital trolls instead.
Byte-Sized Security
Only allow one person per access badge entry—no holding doors open for others. This ensures that every person entering is properly authenticated.
Review employee access rights to systems and data to ensure they follow the principle of least privilege. Remove access for former employees or those who’ve changed roles.
Scammers may create fake profiles to impersonate people you know or trust. Always verify friend or connection requests before accepting.
Phishers often create a false sense of urgency (e.g., “Your account will be locked!”) to push you into acting quickly. Take a moment to verify the request through official channels.
Regularly update your operating system, antivirus, and applications to patch known vulnerabilities. Enable automatic updates whenever possible.
Just as you wash your hands to avoid germs, regularly clearing your browser history and cookies helps keep your digital footprint clean. Stay fresh and protected online!
Run tabletop exercises or simulations to ensure the incident response team can respond effectively to various scenarios (e.g., data breach, ransomware, insider threat). Update the plan based on lessons learned.
Avoid sharing internal company details, project updates, or photos that may expose sensitive information. Even seemingly harmless posts can give attackers useful context.
Avoid giving out passwords, verification codes, or internal procedures over the phone. Attackers often use urgency or authority to pressure victims into sharing sensitive information.
Conduct a formal risk assessment to identify vulnerabilities, emerging threats, and gaps in controls. Use the results to update your security roadmap and risk mitigation plans.
If you see someone in a restricted area without proper ID, politely ask who they are or report them to security. Don’t assume someone else has already done it.
Ensure your posts and profile details are only visible to trusted connections. Platforms often update privacy policies, so check your settings periodically.
Create a silly sentence or a song lyric that only you know, then toss in some numbers and symbols. It’s like a secret handshake that’s easy for you but impossible for intruders.
If an email seems unexpected or urges immediate action, avoid clicking links or opening attachments. Hover over links to preview the URL before clicking.
Annually review IT and security policies to ensure they reflect current threats, technologies, and regulatory requirements. Distribute and communicate any changes to staff.
Never leave exterior or interior security doors open or unattended. Propping them open creates easy access for unauthorized individuals.
If you’re unsure about a caller’s legitimacy, hang up and call back using a known, official number. Never use a callback number provided during a suspicious call.
Secure your accounts with complex passwords that are different from those you use elsewhere. Always enable multi-factor authentication (MFA) for an extra layer of protection.
Identify and remove inactive user accounts that haven’t been used in the last 90+ days. Dormant accounts are a common attack vector for unauthorized access.
