We’ll Say It Again: Security is King In Business

How much does your business prioritize security on the organizational level? The more your business relies on technology, the more susceptible it is to the countless threats that exist in the technological space, and you have to remain cognizant of that as you strive to move your business forward. Today, we’re looking at how each and every individual on your staff contributes to the security of your organization and, consequently, its data.

The Threat Landscape

The number one threat to your business is phishing, by far, but there are others that have a notable presence in the modern workplace.

Phishing tricks people into handing over sensitive information, like passwords and financial credentials, or taking actions that put your business at risk, like clicking on links or downloading malicious files. Phishing attacks tend to use urgent or threatening language, with other dead giveaways consisting of attachments from unknown senders, grammatical errors, or inconsistencies with the user’s email address. Malware is also a serious threat that has no shortage of harmful effects, ranging from general disruption to the encryption of files and even spying on your company’s activity. Finally, password security, or lack thereof, is a serious issue, and you should do all you can to encourage complex password use across all of your accounts.

Remember, complex passwords use a mix of upper and lower-case letters, numbers, and symbols, and they are most effective when used in conjunction with a password manager and multi-factor authentication.

Best Practices (And What You Can Do)

So, what’s a business to do to protect itself from the myriad threats it could face? Here’s a starting point:

• Practice the principle of least privilege - Only grant access to systems on an as-needed basis. 
• Lock your devices when you step away - Use the Windows Key + L or Control + Command + Q to lock devices and prevent unauthorized access.
• Be skeptical while online - Never default to trusting a wireless connection. If you’re planning to click a link, hover over it to see where it goes first. Finally, never download an unsolicited or suspicious file.
• Use two-factor and multi-factor authentication - A second form of verification, like a code sent to your phone or email, can make it less likely that stolen credentials impact your organization.
• Keep your software updated - Updates serve to shore up vulnerabilities and weak points. Enable automatic updates when you can, and don’t ignore notifications for system updates.

What Do You Do When It Feels Wrong?

So you’ve received an email that feels suspicious. It has all the red flags and triggers a part of your brain that says something is wrong. What do you do?

In short, don’t click on any links, download any attachments, or provide any information. Forward the message to your designated IT resource and wait for their go-ahead. If you start to experience strange pop-ups, suspicious advertisements, or your systems start to run slowly for no apparent reason, don’t hesitate to reach out for help. Disconnect your device from the network and the Internet and contact your IT department.

To learn more about how to keep your business safe, reach out to Accucom today.