Contact us today!
866-348-2602

Total Tech Care Blog

Total Tech Care has been serving Florida since 2001, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

Tip of the Week: Your Cybersecurity To-Do List

Tip of the Week: Your Cybersecurity To-Do List

It is a well-established and widely-known fact that your employees are some of the biggest threats to your business via the technology that they use each and every day. If your employees aren’t aware of the practices and policies that they need to follow to prevent these threats, you could find yourself in an unpleasant position. Here, we’ll review four categories of cybersecurity basics that everyone in an organization should abide by, and some tips to support each.

Preventing Phishing

Phishing has been becoming more and more of a favorite tactic by hackers, meaning that you and your employees need to look at any messages that come in via your email (or other solutions) with a critical eye. Here are some practices to help you minimize the influence of phishing on your business:

  • Watch for “Urgent” messages (or, for that matter, “URGENT!!!!!!” ones). Many phishers will try to manufacture urgency to make sure you click without taking a moment to consider it may be an attack. Resist this knee-jerk response.
  • Review in detail. Many phishing messages show distinct warning signs, such as blatant spelling or grammar errors (but this may just be the person you’re talking to as well). You can find other, more reliable signs by giving any links or the email address of the sender the “hover” test. Without clicking on anything, hover your cursor over the links and a small pop-up box will appear. This box will show you the address that really sent the email, or the link that you would actually be redirected to. Check to make sure all the details are kosher. For these reasons, it’s recommended that you don’t click on any links in emails. Instead, retype the URL into your web browser.
  • Double-check with the sender. If you have access to another means of communication with the supposed sender of an email, reach out to them using that other means to confirm that they sent it. If they didn’t, it’s a pretty safe bet that the email is fraudulent.
  • When in doubt, assume the worst. If you just aren’t sure how legitimate a given email is, don’t click around in it. Assume that it is a phishing attempt, and report it to your IT provider.

Establishing Safe Browsing Habits

Unfortunately, there are plenty of threats that reside online, and it is only too easy for a user to unwittingly allow them in. Make sure your users abide by the following policies to minimize the threats you’ll potentially need to deal with.

  • Think before you click. Similarly to links found in emails, there are plenty of opportunities online to let in a threat. Consider what you’re clicking on before you do so. (The “hover” trick works well here too… check out the bottom of the window.)
  • Reserve business computers for business purposes. Non-work-related browsing can bring users to websites that can host threats without the user realizing. Discourage your users from surfing the web, downloading content, and doing other things online unless they are work-related.
  • Moderate access. Use firewalls and content filtering to keep unwanted content off of your network, and users from accessing unwanted content, respectively.
  • Trust your IT resource. If you are even the slightest bit unsure about something, whether it’s a program you’ve been prompted to install or making sure your settings are focused on maintaining security, reach out to IT for assistance.

Enforcing Strong Passwords

It seems that everything requires a password these days, which makes it all the more important that you and your users are aware of how to keep them safe - especially in the workplace.

  • Don’t recycle passwords. Once a password has been used and replaced, it is best to not use it again - this is why you’ll often find a “you have used this password too recently” message if you attempt to use it again within a certain timeframe. This is the same reason that passwords should not be used for more than one account - if that password is compromised, you’ve just lost control of multiple accounts.
  • Avoid easily-guessed passwords. As a way to try and come up with a password that is easy to remember, many people will resort to using common elements in their password - pet names, maiden names, birthdays or anniversaries - or use a simple phrase or a string of numbers. The entire point of a password is to make it so that others are unable to access one of your accounts, so making it something that can be guessed is counter-productive.
  • Consider leveraging passphrases instead. Passphrases are not only typically more secure than a password, they also have a tendency to be more memorable. Let me ask you this… which of these two would you find more memorable, “F4njUJ29S5” or “pearquiethigh?” You can also use basic substitution to make you passphrase more secure, turning our example into “pe@rqu!e+h!gh” instead.
  • Use a password manager. One of the main reasons that people reuse passwords so often and neglect to change them is the fact that they are scared of forgetting them. A password manager can help reduce this by securely saving all of your different passwords behind one master password. 

Protecting Your Business’ Data

Finally, there are many threats out there to your business’ data - including any you have on your clients or your employees. You have a responsibility to yourself, as well as these clients and employees, to make sure that this data is as secure as possible.

  • Make sure your business’ data is backed up. There are so, so, so many ways that your business could lose its data. While it may be attacked, it could just as (if not more) easily be lost due to equipment failure, user error, weather conditions… the list goes on and on. If your on-site data is lost, you will want to make sure you have an up-to-date copy squirreled away in the cloud to reference.
  • Protect your assets with access control. You need to be concerned about both the security of your digital files, and of your actual business location. If you’re using multi/two-factor authentication to secure your online resources, or requiring identity confirmation in order to enter certain areas of the business… you need to be doing both.
  • Maintain your security solutions. The thing about security software is that it isn’t something that you can just set up and count on indefinitely. Attackers are always examining these solutions to find vulnerabilities, so it is important that you regularly update and patch the ones you use to keep them safe. Every solution you have should actually be set up with security in mind. A glaring example is your company’s wireless. Not only should that be secured with a password, it should be hidden away from outside users.
  • Keep your payment options compliant. For your sake, and the sake of your clients, you should make sure your business is compliant to whatever regulatory standards that apply to it… including the Payment Card Industry Data Security Standard (PCI DSS).

Following these guidelines is a great start to ensuring your company’s security. Total Tech Care can help get you this far, and beyond. Reach out to us at 866-348-2602 to learn more about what we can do.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Wednesday, 25 December 2024
If you'd like to register, please fill in the username, password and name fields.

Blog Archive

Sign Up for Our Newsletter

  • First Name *
  • Last Name *

      Free Consultation

      Sign up today for a
      FREE Network Consultation

      How secure is your IT infrastructure?
      Let us evaluate it for free!

      Sign up Now!

      Free Consultation
       

      Tag Cloud

      Security Tip of the Week Technology Best Practices Business Computing Cloud Privacy Hackers Productivity Hosted Solutions Software Efficiency Network Security Business Google Microsoft Internet Email Malware Backup Workplace Tips Innovation User Tips Data Computer Mobile Devices Hardware IT Services VoIP Disaster Recovery Android communications Communication Business Continuity IT Support Smartphones Miscellaneous Smartphone Mobile Device Browser Small Business Network Collaboration Productivity Quick Tips Cybersecurity Users Business Management Phishing Windows Upgrade Managed IT Services Data Backup Outsourced IT Ransomware Windows 10 Data Recovery Office Cloud Computing Server Save Money Windows 10 Passwords Chrome Virtualization Social Media Saving Money Tech Term Holiday Gadgets Automation Managed Service Managed IT Services Microsoft Office Artificial Intelligence Facebook Computers Cybercrime Operating System Wi-Fi Health BYOD Mobile Device Management Networking IT Support Internet of Things Hacking Information Technology Remote Information Covid-19 Spam Managed Service Provider Office 365 Alert Telephone Systems Employer-Employee Relationship Recovery Router Bandwidth BDR Social Engineering Mobility App History Password Money Mobile Computing Encryption Human Resources Applications Application Law Enforcement Remote Monitoring Big Data Data Breach Office Tips Training Blockchain Paperless Office Apps VPN How To Remote Computing Government Data Storage Patch Management Mobile Office Private Cloud Managed IT Bring Your Own Device Data Management Wireless Work/Life Balance Flexibility Gmail Data Security Marketing WiFi Settings IT solutions Entertainment Website Infrastructure Budget Google Drive Two-factor Authentication Voice over Internet Protocol Mouse HaaS Avoiding Downtime Vulnerability Windows 7 Word Servers Cleaning The Internet of Things Lithium-ion battery Staff Software as a Service Telephone System Machine Learning End of Support Connectivity Remote Work Physical Security Education Firewall Safety Vendor HIPAA USB Sports Virtual Reality Redundancy Managed Services Apple Display Keyboard Social Conferencing User Error Employee/Employer Relationship Data Protection Scam Meetings RMM Save Time Risk Management Hacker Vendor Management Digital Signage Access Control Unsupported Software Virus Computing Infrastructure Charger DDoS Virtual Assistant Authentication Going Green Unified Threat Management Computer Accessories Compliance SharePoint OneNote Computer Care Procurement Net Neutrality Current Events Workplace Strategy Telephony Battery Help Desk Customer Service Update Samsung Shadow IT Printing Legal Environment Printer Fax Server Bluetooth Google Docs Value Internet Exlporer Identity Theft Spam Blocking Electronic Medical Records Managed Services Provider SaaS PDF Database Hiring/Firing Remote Workers Augmented Reality IT Consultant Proactive IT Network Congestion Fraud Best Practice Processor eWaste Remote Worker Humor YouTube Black Market Hard Drive Cryptocurrency Business Intelligence Document Management Audit Worker Wearable Technology Computing Retail IT Management Solid State Drive Hard Drives Comparison Wireless Technology Downtime How to Instant Messaging Botnet Robot CES Excel IT Plan Data storage Biometrics Automobile Virtual Desktop Content Management Business Technology Trend Micro Printers Millennials IBM Dark mode Monitor Smart Technology SMS Default App Smart Office Flash Wireless Charging User Science PowerPoint Procedure Windows Media Player Saving Time Shopping Virtual Private Network Google Search Software Tips Workforce Supercomputer dark theme Emails Reputation Streaming Media AI IT Infrastructure Sync Cables Bing Content Customer Relationship Management Managing Stress Tech Support FinTech Distributed Denial of Service Social Network Project Management Nanotechnology Techology Analyitcs Telecommuting Laptop Netflix Customers Cameras Two Factor Authentication Investment Programming Cortana Audiobook Digital Signature Root Cause Analysis Employees Employee/Employer Relationships Music Warranty ISP HBO Knowledge Touchpad Windows 365 Video Conferencing ROI Antivirus HVAC Skype Google Apps Shortcuts Politics Analysis Data loss Advertising Windows 8 Sales Bitcoin Troubleshooting Personal Administrator Cryptomining IT service Devices Outlook Leadership Point of Sale Printer Server Notifications Supply Chain Management Enterprise Content Management Start Menu MSP Accountants Screen Mirroring Tablet Loyalty Monitoring Batteries Windows 8.1 Books Digitize Microchip Domains Thought Leadership Frequently Asked Questions Credit Cards Password Manager Windows 10s Relocation Windows Server 2008 R2 Password Management Mobile IaaS Maintenance Cast Multi-Factor Security Customer relationships Email Best Practices Emergency IT Assessment Search Engine Manufacturing Twitter Tip of the week Video Games Bloatware webinar Worker Commute Business Mangement Public Cloud Employer Employee Relationship NIST Professional Services Managed IT Service Security Cameras Experience Smart Tech Tablets Trending Assessment Computer Tips Virtual CIO OneDrive Biometric Security Addiction Windows Server 2008 Scalability Entrepreneur Amazon Tools Business Owner Recycling Peripheral Using Data Wiring Shortcut Practices Television NarrowBand Digital Security Cameras Copiers 5G Cache Search Cost Management Amazon Web Services Consultant Social Networking Criminal iPhone Analytics Quick Tip Safe Mode GDPR Smartwatch Hosted Computing Public Computer Ergonomics Transportation Development OLED Wireless Internet Regulations Online Shopping Best Available WIndows 7 Computer Fan Files Rootkit PCI DSS Virtual Machine Running Cable File Sharing Fiber Optics Camera Employee Inventory Memory Specifications Chromecast 2FA Workers Benefits Messaging Cabling Wire Evernote FENG Colocation Travel Uninterrupted Power Supply Policy Hypervisor

      Top Blog

      The reasoning for this is simple: you want to make sure that operations are proceeding as intended, even if you’re not there. If you completely check out from the workplace every time you leave, you could return from your vacation to a complete and total disaster that may have been prevented with y...
      QR-Code