Contact us today!
866-348-2602

Total Tech Care Blog

Total Tech Care has been serving Florida since 2001, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

How an End User Might Accidentally Undermine Your Security: 10 Innocent Mistakes

b2ap3_thumbnail_innocent_mistakes_400.jpgIf you’re like every other small business out there, you know that the more employees you hire, the more technology that you have to procure. However, when you have more end-users, you provide more avenues for threats to slip into your network infrastructure unnoticed. When all it takes is one simple mistake from a single end-user, how can you minimize the chances of falling victim to an untimely hacking attack?

We’ve put together ten honest mistakes that any end-user can make, and how they can be prevented.

  • Clicking on malicious links: With so much information on the Internet, it’s easy for an employee to search through countless pages without any regard to the sites and links that they’re clicking on. You need to emphasize the importance of safe browsing, including double-checking the destination of a link before clicking on it. You can do so by hovering over the link and looking in the bottom-left corner of your browser.
  • Using weak passwords: Employees frequently use passwords that aren’t strong enough to keep hackers out. Often times, they’ll simply use something of personal significance, like the name of their pet or a specific date. This isn’t the right way to approach password security. Instead, users should attempt to put together passwords that are private, randomized strings of numbers, letters, and symbols.
  • Ignoring mobile security: Even if your company has the latest and greatest security solutions installed on its desktops, you should also be thinking of your mobile devices, like smartphones and tablets. It’s arguably more important that your mobile devices have solid security solutions implemented on them, as they are often on the road, connecting to potentially dangerous hotspots. You need to make sure that security is a top priority in your Bring Your Own Device (BYOD) policy.
  • Accessing sensitive data through unsecured connections: If your employees are using the local café’s free wireless Internet to get some work done on their lunch break, it could be a dangerous gambit. Public Wi-Fi hotspots are notorious for being cesspools of online threats. Implementing a virtual private network (VPN) can be a handy investment that can encrypt data while it’s in transit, mitigating this risk somewhat.
  • Losing unencrypted devices: It’s not unheard of for an employee to use company devices in public places. If they accidentally leave their smartphone on the bus, or their tablet on a park bench, there’s always the risk that it can be stolen. Unless you practice proper encryption protocol, any information available on the device can be accessed by the person who finds it, be it a good samaritan or a tech-savvy thief.
  • Implementing unapproved solutions: Some employees simply prefer to use solutions that aren’t provided by the company to get their work done. The problem here is that the employee is moving forward without consulting IT about it, and that your data is being used in a solution that you can’t control. Plus, if the employee is using free or open-source software, these often come bundled with unwanted malware that can put your data in even greater peril.
  • Targeted business email scams: Phishing and spear-phishing attacks are growing more common. One example of this is an HR employee checking their inbox to find what looks like a job application or employment inquiry. All of the right information is there and nothing appears out of the ordinary; that is, until a malicious link contained within it starts to download malware or other nasty threats to your infrastructure. Other types of phishing attacks will ask end-users to confirm personally identifiable information or sensitive account credentials. Educating your team on how best to identify phony email messages is imperative to keeping your network secure.
  • Personal email use: It’s one thing to check your personal email account while at work, but another entirely to use your personal email account to perform work purposes. As the recent debacle with Hillary Clinton shows, people don’t take kindly to sensitive information being leaked via an unsecured email server that their organization has no control over. Add in the fact that personal email accounts are often not as secure as those in a professional productivity suite, and you have a recipe for disaster. You need to reinforce that your team should keep their work and personal email separate.
  • Leaving workstations unattended: Besides the fact that some tech-savvy employees are practical jokers, it’s a security risk to leave a workstation unlocked and unattended for long periods of time. Imagine if someone from outside of your organization walked into your office and accessed confidential files without authorization; that’s on the employee who got up and left the device unattended. Encourage your employees to always log off of their workstations, or at least lock them, before stepping away from their computer.
  • Using external storage devices: Your organization should only be using IT-provided USB devices and external storage. Otherwise, anyone with a random flash drive can connect it to your network, unleashing a horde of who-knows-what into your infrastructure.

User error is a primary cause for concern among businesses, but it can be mostly avoided by providing your staff with the training required to do their jobs properly. For more information about IT best practices, give us a call at 866-348-2602.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Thursday, 24 April 2025
If you'd like to register, please fill in the username, password and name fields.

Blog Archive

Sign Up for Our Newsletter

  • First Name *
  • Last Name *

      Free Consultation

      Sign up today for a
      FREE Network Consultation

      How secure is your IT infrastructure?
      Let us evaluate it for free!

      Sign up Now!

      Free Consultation
       

      Tag Cloud

      Security Tip of the Week Technology Best Practices Business Computing Cloud Privacy Hackers Productivity Hosted Solutions Efficiency Software Network Security Business Google Microsoft Internet Email Malware Workplace Tips Backup Innovation Data User Tips Computer Mobile Devices IT Services Hardware Android VoIP Disaster Recovery communications IT Support Smartphones Communication Business Continuity Miscellaneous Smartphone Mobile Device Browser Small Business Network Productivity Collaboration Quick Tips Cybersecurity Users Business Management Upgrade Phishing Windows Managed IT Services Outsourced IT Ransomware Data Backup Windows 10 Data Recovery Server Save Money Cloud Computing Office Passwords Windows 10 Chrome Virtualization Tech Term Gadgets Saving Money Holiday Social Media Microsoft Office Managed Service Managed IT Services Automation Cybercrime Operating System Computers Facebook Artificial Intelligence IT Support Health Hacking Internet of Things BYOD Wi-Fi Mobile Device Management Networking Covid-19 Managed Service Provider Information Spam Office 365 Telephone Systems Remote Alert Information Technology Employer-Employee Relationship Recovery Social Engineering Mobility Router BDR Bandwidth Human Resources Encryption Big Data Applications Remote Monitoring Law Enforcement Data Breach Mobile Computing App History Application Password Money How To Blockchain Paperless Office Remote Computing Data Storage Mobile Office Patch Management Government Private Cloud Office Tips Managed IT Training VPN Apps Two-factor Authentication Google Drive Mouse HaaS Vulnerability Infrastructure Windows 7 Voice over Internet Protocol Avoiding Downtime Flexibility Word Marketing WiFi Servers IT solutions Entertainment Website Wireless Budget Bring Your Own Device Data Management Data Security Gmail Work/Life Balance Settings Managed Services Display Firewall End of Support Education Physical Security Telephone System Staff Virtual Reality Software as a Service Safety Apple Employee/Employer Relationship Machine Learning Sports HIPAA RMM Redundancy Connectivity Social Remote Work Conferencing Keyboard User Error Meetings Scam Risk Management Hacker Vendor Management Save Time Data Protection USB The Internet of Things Lithium-ion battery Cleaning Vendor Access Control Fax Server Value Remote Workers Battery Virtual Assistant Shadow IT Processor Legal Spam Blocking Authentication Electronic Medical Records SaaS Internet Exlporer Hard Drive Hiring/Firing Network Congestion Update PDF eWaste Computing Proactive IT Virus Google Docs Identity Theft Best Practice Unified Threat Management Business Intelligence YouTube Computer Accessories Black Market Wearable Technology Audit Worker Retail Hard Drives Digital Signage IT Management Augmented Reality Instant Messaging Fraud Excel Botnet Robot Document Management IT Plan Wireless Technology Printer Remote Worker Biometrics Solid State Drive Procurement How to Bluetooth Downtime Virtual Desktop Cryptocurrency Workplace Strategy Net Neutrality Unsupported Software Help Desk Data storage DDoS Charger Printing Automobile SharePoint Compliance Comparison Computer Care IT Consultant OneNote Current Events CES Computing Infrastructure Going Green Telephony Managed Services Provider Customer Service Samsung Humor Business Technology Content Management Environment Database Laptop Skype Printers Antivirus Millennials Windows Server 2008 R2 Techology Customer relationships Wireless Charging Windows 8 Customers Data loss Smart Office Outlook Email Best Practices IT service Leadership IT Assessment Audiobook Troubleshooting Manufacturing Consultant Touchpad Analytics Start Menu Virtual Private Network Workforce Computer Tips Loyalty Cables Managed IT Service Tablet Security Cameras Screen Mirroring Frequently Asked Questions Virtual CIO Domains OneDrive Politics Books Biometric Security Advertising Best Available WIndows 7 Mobile Project Management Windows 10s Nanotechnology Peripheral Telecommuting Digital Security Cameras Maintenance Cortana Using Data Notifications IaaS Cast Tip of the week webinar Digital Signature Copiers Bloatware Emergency 5G Professional Services Warranty Public Cloud Quick Tip Employer Employee Relationship Ergonomics Assessment Google Apps Tablets Smartwatch Relocation HVAC Windows Server 2008 Analysis Development Entrepreneur OLED Virtual Machine Video Games User PowerPoint Tools Administrator Windows Media Player Devices PCI DSS Enterprise Content Management 2FA Shortcut Television Fiber Optics Worker Commute Employee MSP Accountants Messaging Experience Cost Management Cabling Credit Cards Hypervisor Scalability Managing Stress Microchip Thought Leadership Policy Social Networking Password Management Dark mode Public Computer Password Manager Trend Micro Business Owner NarrowBand Cameras Regulations SMS Transportation Multi-Factor Security Default App Saving Time Search Search Engine Running Cable Computer Fan Twitter Procedure Rootkit NIST dark theme Business Mangement Shopping Memory Google Search iPhone Workers Smart Tech AI Benefits Trending IT Infrastructure Amazon Bing FENG Addiction FinTech IBM Recycling Social Network Files Chromecast Printer Server Flash Wiring Practices Smart Technology Investment Amazon Web Services Employee/Employer Relationships Science Cache Employees Software Tips Safe Mode Windows 365 Supercomputer Criminal ISP Colocation Uninterrupted Power Supply Sync GDPR Emails Hosted Computing Video Conferencing ROI Customer Relationship Management Online Shopping Bitcoin Shortcuts Monitor Distributed Denial of Service Wireless Internet Sales File Sharing Point of Sale Personal Analyitcs Cryptomining Camera Netflix Inventory Supply Chain Management Programming Two Factor Authentication Specifications Evernote Batteries Reputation Streaming Media Root Cause Analysis Wire Monitoring HBO Windows 8.1 Knowledge Digitize Content Music Travel Tech Support

      Top Blog

      The reasoning for this is simple: you want to make sure that operations are proceeding as intended, even if you’re not there. If you completely check out from the workplace every time you leave, you could return from your vacation to a complete and total disaster that may have been prevented with y...
      QR-Code