7 Cybersecurity Tips for Your Organization

Last month was Cybersecurity Awareness Month. How did you recognize it at your organization? If you didn’t know about it, don’t worry. It’s never too late to raise awareness about being cyber smart. Cybersecurity should be emphasized throughout the year — not just in October. Below are seven cybersecurity tips to share with your organization and information on where to find more information from the Cybersecurity and Infrastructure Security Agency.

1. Double your login protection. Enable multi-factor authentication (MFA) for all accounts and devices to ensure that the only person with access to your account is you. Use it for email, banking, social media, and any other service that requires logging in. If MFA is an option, enable it using a trusted mobile device, such as your smartphone, an authenticator app, or a secure token—a small physical device that can hook onto your key ring. Read the Multi-Factor Authentication (MFA) How-to-Guide for more information.
2. Shake up your password protocol. According to National Institute of Standards and Technology (NIST) guidance, you should consider using the longest password or passphrase permissible. Get creative and customize your standard password for different sites, which can prevent cybercriminals from gaining access to these accounts and protect you in the event of a breach. Use password managers to generate and remember different, complex passwords for each account. Read the Creating a Password Tip Sheet for more information.
3. If you connect, you must protect. Whether it’s your computer, smartphone, game device, or other network devices, the best defense against viruses and malware is to update the latest security software, web browser, and operating systems. Sign up for automatic updates and protect your devices with anti-virus software. Read the Phishing Tip Sheet for more information.
4. Play hard to get with strangers. Cybercriminals use phishing tactics, hoping to fool their victims. If you’re unsure whom an email is from—even if the details appear accurate— or if the email looks ‘phishy,’ do not respond or click on any links or attachments found in that email. When available use the “report phish” or “report” option to help your organization or email provider block other suspicious emails before they arrive in your inbox.
5. Never click and tell. Limit what information you post on social media—from personal addresses to where you like to grab a coffee. Many people don’t realize that these seemingly random details are all criminals need to know to target you, your loved ones, and your physical belongings—online and in the real world. Keep Social Security numbers, account numbers, and passwords private and specific information about yourself such as your full name, address, birthday, and even vacation plans. Disable location services that allow anyone to see where you are – and where you aren’t – at any given time. Read the Social Media Cybersecurity Tip Sheet for more information.
6. Keep tabs on your apps. A mobile application supports most connected appliances, toys, and devices. Your mobile device could be filled with suspicious apps running in the background or using default permissions you never realized you approved—gathering your personal information without your knowledge while also putting your identity and privacy at risk. Check your app permissions and use the “rule of least privilege” to delete what you don’t need or no longer use. Learn to say “no” to privilege requests that don’t make sense—only download apps from trusted vendors and sources.
7. Stay protected while connected. Before you connect to any public wireless hotspot – like at an airport, hotel, or café – be sure to confirm the name of the network and exact login procedures with the appropriate staff to ensure that the network is legitimate. If you use an unsecured public access point, practice good internet hygiene by avoiding sensitive activities (e.g., banking) requiring passwords or credit cards. Your personal hotspot is often a safer alternative to free Wi-Fi. Only use sites that begin with “https://” when online shopping or banking.

For more tip sheets, visit CISA’s very helpful website.

Laurie Head is an owner of AIS Network.