Cyber Hygiene and The Basics You Should Consider

As the world continues to become more reliant on the use of the internet, cyber security is crucial in protecting sensitive information and maintaining the integrity of systems. Cyber threats are continuing to evolve, meaning individuals and businesses alike must prioritise security to protect personal data, intellectual property and financial information.  By using effective cyber security practices, data breaches and financial losses can be dramatically reduced, as well as aiding in building trust with customers and partners.

It is important to stress that with an understanding and implementation of robust security controls, everyone can contribute to a safer online environment, which will enhance the resilience of organisations and privacy of individuals.

Common threats to cyber security include phishing, malware, ransomware, insider threats, unpatched software and the use of using unsecured public wi-fi networks.

Below are some examples of cyber hygiene practices which businesses and individuals should consider when interacting with devices connected to the internet.

Using Antivirus

Viruses, spyware and ransomware can be used to infect or disrupt your computer operations, using anti-virus software can prove pivotal when protecting your device. Real-time scanning can be used to detect and remove any threats before they can cause any damage.  Anti-virus can also be used to enhance safe browsing by warning the user against malicious websites and any attempts of phishing. It is important to state that the anti-virus software should always be up-to date so it can ensure your device is protected from the latest vulnerabilities.  Norton, Bitdefender and Kaspersky are examples of well-known anti-virus products.

Regular Software Updates

Both individuals and organisations can improve their security posture and overall operational efficiency by incorporating regular security updates. Without installing the latest security updates, a device or system can become exposed to cyberattacks, so be sure not to pass when you get a prompt for an update on your device. Not only can regular software updates make your system more secure, but they can also improve functionality and enhance compatibility with other applications which can reduce the risk of errors and increase productivity.

Using Public Wi-Fi

A user should always use caution when they are using public wi-fi as there are several security risks. These risks include your personal data being intercepted or manipulated, from an attack known as a ‘man-in-the-middle’, where a cybercriminal can position themselves (electronically) in the middle of your device and browsing session. Criminals can set up rogue hotspots where they act as if they are coffee shop for example appearing legitimate, which again can lead to exposing their data. It is advised to use a VPN as it will encrypt your traffic, making it harder to for attackers to intercept your data. A user should also refrain from conducting sensitive transactions, only connect to networks that require a password and after using public Wi-Fi always remember to instruct your device to forget it so it will not automatically connect in the future.

Passwords

Weak passwords can be easily guessable, which significantly increases the risk of unauthorised access, so complex passwords should be used which combine numbers, letters, and be a minimum of 15 characters long as advised by NIST, or you could take the NCSC’s advice of Three Random Words. Two-factor authentication should be used wherever possible to add an additional layer of protection. A user should not reuse passwords across accounts, as one account being compromised could lead to further compromise, and this is where a password manager could aid by maintaining unique passwords across accounts. Furthermore, a user should not neglect updates and should always change a password after a breach. It is also crucial to keep up with the latest password guidance, for instance NIST have recently changed their advice in relation to the requirement for password complexity to not include special characters and no longer recommend mandatory password resets unless evidence of compromise is present.  

Education

It is important for individuals and businesses to be educated regarding basic cyber security hygiene. Cyber threats constantly evolve, so it is vital that education and training are a priority. Training should be provided relating to common threats like phishing, malware and social engineering to aid in recognising these sorts of attacks. Safe browsing habits should be highlighted in helping a user to identify secure websites, avoid suspicious links and how to report when something seems out of the ordinary. Mostly, training and education should be undertaken at least quarterly and be consistently reinforced through awareness raising in things such as newsletters, refresher courses and as needed when new significant information emerges.

At ITSUS, we believe that knowledge is the cornerstone of effective cyber security. By investing in cyber security training, you’re not only protecting valuable assets but also fostering a proactive security culture. If you’re looking for cyber education services designed to safeguard personal and organisational data, get in touch with the team to learn more about how we can help you build a more resilient and informed workforce.