Threats to your organization and user productivity are more pervasive than ever. Malicious hackers and clever social engineering is making virus and malware protection harder and harder. Many times human intervention and end – user diligence is the last line of defense against these constant threats.
Be Wary of Unexpected Emails and Attachments
Be wary of emails from people you don’t know and do not open attachments. If you receive emails from a source you do not know, especially if it is sent to many people, be wary of it. If it is a source you know, but the grammar or tone is uncharacteristic (formal vs. informal for example) it is likely spam. Many hackers attempt to infect your computer through email and then get to other information on your computer and networks your computer has access to. Attachments can contain virus programs that can install themselves because you simply clicked on them.
Backup Your Data
Make sure your data is backed up on a regular basis. This protects your data in the event of an operating system crash, hardware failure, or virus attack.
Don’t Click on Unknown Links
Web links can connect you to web pages that can download software that infects your system. Only click on links from a source you know and trust. Be wary of URL shorteners, they obscure the destination URL by design and can lead you to untrusted sites. Hover over the web link to see where it is really taking you.
Don’t Leave Your Computer Open
Whenever you are done using your computer log out or lock your computer. Someone could sit down at your computer and continue working from your account, doing damage to your files, retrieving personal information, or using your account to perform malicious actions.
If it Doesn’t Seem Right, Question It
Common sense can protect you from many things. Your bank will never ask for your information either through a webpage or email. Your tech support will not ask for passwords and usernames through email. Passwords for your system, and other ways to access systems, are like the PIN of your bank account, would you share that information with someone you don’t know? While your technical service provider may request that you change your password, they will never specify what you should change it to or ask you what it is.
Passwords
Enable passwords on all your devices. Use strong passwords with eight or more characters and a mix of uppercase and lowercase characters and numbers. Don’t use passwords that people can easily guess like your birthday or your child’s name. Do not use the same password for different services (i.e. using the same password for your bank and Facebook). Never share passwords, even with friends or family. When setting security verification, choose questions and answers that are unlikely to yield the correct answer in an internet search.
Ensure you have smart screen (in Internet Explorer) turned on, which helps identify reported phishing and malware websites.