identity-computing

10 Top Tips to Building a Culture of Cyber Awareness

Mon, 24 Jun 2024 03:09:33 GMT

Cyberattacks are a constant threat in today’s digital world. Phishing emails, malware downloads, and data breaches can cripple businesses and devastate personal lives.

Employee error is the reason many threats get introduced to a business network. A lack of cybersecurity awareness is generally the culprit.

People don’t know any better, so they accidentally click a phishing link. They also create weak passwords, easy for hackers to breach. But here’s the good news: these mistakes are preventable. Building a strong culture of cyber awareness can significantly reduce your risks.

Think of your organisation’s cybersecurity as a chain. Strong links make it unbreakable, while weak links make it vulnerable. Employees are the links in this chain. By fostering a culture of cyber awareness, you turn each employee into a strong link. This makes your entire organisation more secure.

PROTIP: Approximately 95% of data breaches are caused by human error.

Top Tips for Building a Culture of Cyber Awareness

Building a cyber awareness culture doesn't require complex strategies or expensive training programmes. Here are some simple steps you can take to make a big difference:

1. Lead by Example

Security shouldn’t be an IT department issue alone. Get leadership involved! When executives champion cyber awareness, it sends a powerful message to the organisation.

Leadership can show their commitment by:

Participating in training sessions
Speaking at security awareness events
Allocating resources for ongoing initiatives

2. Make Security Training Engaging

Cybersecurity training doesn’t have to be dry and boring. Use engaging videos, gamified quizzes, and real-life scenarios. These keep employees interested and learning.

Think of interactive modules where employees choose their path through a simulated phishing attack or short, animated videos that explain complex security concepts in a clear and relatable way.

3. Use Clear and Simple Language

Cybersecurity terms can be confusing. Communicate in plain language, avoiding technical jargon. Focus on practical advice employees can use in their everyday work.

Don’t say, “implement multi-factor authentication.” Instead, explain that it adds an extra layer of security when logging in, like needing a code from your phone on top of your password.

4. Provide Concise Training Modules

Don’t overwhelm people with lengthy training sessions. Opt for bite-sized training modules that are easy to digest and remember. Use microlearning approaches delivered in short bursts throughout the workday. These are a great way to keep employees engaged and reinforce key security concepts.

5. Conduct Regular Phishing Simulations

Regular phishing drills test employee awareness and preparedness. Send simulated phishing emails and track who clicks. Use the results to educate employees on red flags and reporting suspicious messages.

But don’t stop there! After a phishing drill, take the opportunity to dissect the email with employees. Highlight the telltale signs that helped identify it as a fake.

6. Simplify and Encourage Reporting

Employees need to feel comfortable reporting suspicious activity without fear of blame. Create a safe reporting system and acknowledge reports promptly.

You can do this through:

A dedicated email address
An anonymous reporting hotline
A designated security champion employees can approach directly

7. Empower Security Champions

Identify enthusiastic employees who can become “security champions.” These champions can answer questions from peers and promote best practices through internal communication channels. This keeps security awareness top of mind.

Security champions can be a valuable resource for their colleagues. They foster a sense of shared responsibility for cybersecurity within the organisation.

8. Extend Security Practices to Home

Cybersecurity isn’t just a work thing. Educate employees on how to protect themselves at home too. Share tips on strong passwords, secure Wi-Fi connections, and avoiding public hotspots. Employees who practice good security habits at home are more likely to do so in the workplace.

9. Celebrate Cybersecurity Successes

Recognise and celebrate employee achievements in cyber awareness. Did someone report a suspicious email? Did a team achieve a low click-through rate on a phishing drill? Publicly acknowledge their contributions to keep motivation high. Recognition can be a powerful tool. It helps to reinforce positive behaviour and encourages continued vigilance.

10. Bonus Tip: Utilise Technology to Enhance Security

Technology can be a powerful tool for building a cyber-aware culture. Use online training platforms that deliver microlearning modules and track employee progress. You can schedule automated phishing simulations regularly to keep employees on their toes.

Tools that bolster employee security include:

Password managers
Email filtering for spam and phishing
Automated rules, such as Microsoft’s Sensitivity Labels
DNS filtering

The Key Takeaway: Cybersecurity is a Shared Responsibility

Building a culture of cyber awareness is an ongoing process. Repetition is key! Regularly revisit these steps. Keep the conversation going. Make security awareness a natural part of your organisation’s DNA.

Cybersecurity is a shared responsibility. By fostering a culture of cyber awareness, your business benefits. You equip everyone in your organisation with the knowledge and tools to stay safe online.

PROTIP: Empowered employees are your strongest defence against cyber threats.

Need Help with Hardware or Software Setup?

Why struggle with email filtering or security rules setup? Come to the pros to save time and avoid frustration. Book in for your free chat with Identity Computing today to schedule a chat about your cybersecurity needs.

Article used with permission from The Technology Press .

10 Top Tips for Optimising Your Dual-Monitor Setup

Tue, 03 Oct 2023 04:25:51 GMT

Two monitors are better than one when it comes to getting things done. A dual-monitor setup can increase your efficiency whether you're a gamer, a creative professional, or an office worker.

A study by Jon Peddie Research found that dual displays can increase productivity by 42%. However, this isn't just as simple as buying an extra screen and plugging it in.

It’s common for people to feel strange when adjusting to working with two monitors. They might even find it harder despite having more screen space. The cause of this is usually how they've set things up. They either have the screens positioned wrong or haven't optimised the settings.

We’ll dive into some handy tips for the best dual-monitor setup. These should help you improve your experience when using two-screens and take your productivity to the next level.

PROTIP: Buying the same model of screen twice will make your setup look nicer

Top Tips for a Great Two-Screen Setup

1. Match the Size and Resolution

Before you jump into the excitement of a dual-monitor setup do some matching. Make sure your monitors are well-matched with each other visually and fit into the space you need to put them. Try to use monitors of the same size and resolution. This helps to avoid any jarring differences in image quality or size. Your eyes will thank you.

2. Get the Right Cables

Nobody likes coming home from the store and opening up your new package only to find that it doesn't fit. This can happen if your cables don't fit the ports! To avoid this headache, check your device outputs and inputs to ensure you have the right cables on hand. HDMI, DisplayPort, and DVI are common options but you should make sure which ones you need for your specific setup so it works at optimal performance.

3. Position the Screens

Placing your monitors correctly can make a world of difference. This is true for both your comfort and productivity. Ideally, arrange them side by side, keeping the top edges aligned. Adjust the angle to reduce neck strain, and make sure the distance is comfortable for your eyes. After all, you'll be spending a lot of time in front of these screens.

4. Extend Your Desktop

It’s tempting to mirror your displays and have the same content on both screens but that's not the full potential of a dual-monitor setup. Embrace the extended desktop feature. It allows you to have separate content on each screen. This means you can work on a document on one screen. And browse the web or handle email on the other. This can double your productivity!

5. Tweak the Taskbar

A cluttered taskbar can quickly turn your dual-monitor setup into chaos so it's best to keep things well organised. Set the taskbar to display only the active applications on the screen they're open in.

Steps:

Right-click on the taskbar, go to "Taskbar settings.”
Open “Taskbar behaviors”
Adjust the setting, “When using multiple displays, show my taskbar apps on." Set it to the taskbar where the window is open.

No more hunting for the right window across two taskbars.

6. Use Window-Snapping Shortcuts

Did you know that Windows has window-snapping shortcuts? Use the Windows key plus the left or right arrow to snap an application to one side of the screen. It will fill exactly half of it. This is perfect for comparing documents. As well as writing while researching or watching a video while working. You won't be able to live without it after you've tried it!

7. Enhance Your Gaming Experience

Many modern games support dual monitors, allowing you to have an extended field of view. This is especially useful for racing and flight simulation games. Just remember to adjust your graphics settings within the game to make sure it's optimised for the best performance.

8. Master Your Multitasking

Multitasking is where have your dual monitor setup will really pay off. One way to make use of them, for designers, could be to have design software on one screen and reference images on the other. Another way, for writers, could be to have research materials on one screen and writing software on the other. The possibilities are endless. Explore the many workflows that make the most of both screens.

9. Manage Your Cables

Double the monitors means double the cables. If you're not careful they can quickly turn into a jumbled mess. To keep things tidy, invest in some cable management solutions. These generally include adhesive cables, clips and cable sleeves. Your setup will look cleaner and it'll also be easier to make changes or upgrades in the future.

10. Get Comfortable With Your Ergonomics

As you get comfortable in your new dual-monitor world, remember to think about ergonomics. Make sure that your monitors are at eye level and that your keyboard and mouse are at a comfortable height and angle. Good ergonomics can prevent strain and discomfort. This will allow you to enjoy your setup for longer without developingany aches or pains.

PROTIP: You can hire someone to take care of all this for you

Need Help with Hardware or Software Setup?

Why struggle with hardware or software setup? Come to the pros to save time and avoid frustration. Book in for your free chat with Identity Computing today to schedule a chat about your technology needs.

Article used with permission from The Technology Press .

The Dangers of Phishing

Sun, 25 Sep 2022 23:25:01 GMT

We’re not talking about the dangers of fishing here like falling into the water or getting a hook stuck in your finger... We’re talking about phishing with a ph...

You’ll see it all the time in your email inbox when a scammer sends you emails where they try to look like a “reputable company” to trick you. They might try getting you to reveal personal information like your passwords or credit card details. They also might try getting you to click on malicious links that can extract these credentials from your computer.

Phishing scams aren’t just a problem for emails, they can also be sent through social media, phone calls and text messages.

It’s important that you know what you should look out for! That’s why we’ve written some tips here on what to look for so you can avoid scammers.

PROTIP: Reputable organisations won’t ask you to pay for anything using gift cards.

Over the Phone

If you get a call or text from your bank asking you to confirm your personal details - THINK TWICE. If they are calling you about suspicious activity on your account and ask you to confirm your details so they can investigate - STOP. Maybe they can quote you your card number and need you to confirm your identity by giving them the security code printed on the back - DON’T.

The best practice in these cases is to record their number or ask for their number and say you’ll call them back. Then you can call the hotline for your actual bank and report the scam to them.

Never update payment details over the phone or from an email. If you fear you’ve been tricked call your bank immediately to change your details. Banks typically leave businesses' old bank details active for months to capture people who have forgotten to update the payment details, so if you pay into the old account, they’re not going to be too worried.

PROTIP: Scammers often use strange characters that look similar to the English alphabet in their emails so they can get past filters set up by your email service provider.

Via Email

Phishing emails are made to look genuine, copying the format used by real organisations the scammer might be pretending to represent, including their branding and logo. Often these emails will have links in them to a fake website that also looks like the real deal, but has a slightly different website address. Sometimes the malicious emails will have been sent to you from friends who have already had their accounts phished.

How to Identify Phishing Emails

So how do you know? Here are some steps you can take to avoid the dangers of email phishing:

Check the email address the email is from - this can be faked too but it could also give you a hint that it is not legitimate
If you are unsure you can call the company the email is supposedly from before opening any links or downloads to ensure it is really from them
If the email contains spelling mistakes and grammatical errors that’s a sign it has not come from the real organisation
NEVER open or download a file sent to you unless you’re 100% sure it’s safe - especially beware of exe files!
Check or test any links before clicking on them.
Most reputable companies have your full name and will use it in the email. The scammers may not have these details so will use terms such as Dear Friend, Dear client or Dear valued customer.

How to Test Email Links

Unsure of how to check the links from your email? Here are some ways you can tell:

Simply hover your cursor over the link and the destination should pop up at the bottom of your browser window. It should match the real URL of the official website EXACTLY (i.e. not have a hyphen in between the words etc.).
Alternatively, you can right-click on the link and “Copy link address.” Paste this in a text doc and examine it.
Use a link scanner that will check for suspicious activity and will give you the result of your submitted link. Some antivirus programs come with versions that install in your browser. If you are unsure about checking links yourself you could install one of these to put your mind at ease.

PROTIP: You can hire someone to take care of all this for you

Hire a Professional

If you’re worried about the security measures in place at your business or organisation, you may want to hire a professional. Book a free 45-minute consultation with Identity Computing today!

7 Tips for Cyber Security

Mon, 29 Aug 2022 02:27:28 GMT

All businesses should be prioritising cyber security. They should all put plans in place like risk management policies and ensure their staff are educated on their content.

Today’s cyber threat landscape is extremely challenging, and it’s only getting more complicated as new technologies become mainstream.

That’s why we’ve put together 7 steps to implement that will help keep you’re technology secure.

PROTIP: Cybersecurity protects systems, networks, and programs from digital attacks.

1. Network Security

You need to protect your networks from attack. There are plenty of programs available to defend your network and filter out unauthorised access and malicious content. Once the right software is installed you’ll need somebody to monitor and test it. This is when IT professionals are often hired.

Network Security is a huge area and it can take many years to get an in-depth grasp of its concepts. If you’re running a very small business you might not need a professional but as you scale up your business and hire employees it would be a good idea to protect yourself. The more valuable your business, the more valuable its data is to hackers.

2. User Education and Awareness

Make sure your team knows your security policies and let them know what is an acceptable and secure use of your technology systems. Keep them updated with any changes and ensure teaching these processes is a step in your team training.

3. Malware Prevention

Malware is a constant threat to all computers, but there is no shortage of security programs to deal with them. Produce relevant policies and establish anti-malware defences across your organisation.

Don’t install any programs you’re not highly confident about as this is an easy way for malicious code to be snuck into your network. If you are unsure what makes a program trustworthy that’s a good sign that you should hire an IT professional.

4. Removable Media Controls

Removable media is any form of computer storage that is designed to be inserted and removed from a system, such as USB flash drives. Limit the usage of these devices as much as possible and ensure all media is scanned for malware before making a copy of it on your system.

You should create a policy controlling access to removable media. These devices can easily be used to steal data or install malicious code. Social engineers are types of con artists who have many strategies for tricking people into plugging USBs into their company computers. A good IT professional will know a lot about their typical tricks and how to best avoid them.

5. Apply Patches

It is important to apply security patches to ensure your system is not vulnerable to any new exploits that hackers have found. Malicious people are always looking for flaws in systems and sometimes when they are found they become widely distributed knowledge. This means that the software companies are able to provide ‘patches’ for these security holes. However, if you don’t install the patch it’s easy for intruders to find these now widely known pathways into your system.

6. Manage User Privileges

You should make sure that every different person with access to the system has a different user account and that employees never share their passwords. Limit user privileges so that you assign everyone the minimum amount of access you can while still making it possible to do their jobs. Remove access to your system for all former employees as soon as possible.

These types of processes make it easier to monitor user activity. This means if anything bad happens to your system you’ll have an idea of who was responsible. If you have a lot of employees or no spare time you may need some help in getting these accounts and permissions set up securely.

7. Incident Management

Establish incident response and disaster recovery strategies. This will usually involve regular backups, updated regularly and kept in multiple secure locations. You will want to tell your staff about what to do if a disaster happens with their data. This will usually involve contacting a specific person who knows how to restore or repair a broken system.

Of course, you won’t want to tell staff where all your backups are located in case they decide to destroy them all. On that note, you should report criminal incidents to law enforcement.

PROTIP: You can hire someone to take care of all this for you

Hire a Professional

At Identity Computing, we can take a look at your existing Toowoomba business IT systems and tailor a custom security plan that’s right for your business. Book your free 45-minute consultation with us today!

How to Choose a Firewall for Your Business

Mon, 25 Jul 2022 02:26:49 GMT

Choosing the firewall that best serves the needs of your business is crucial for your security. Not all firewalls are built the same and you shouldn’t assume that the default firewall software will be enough for your situation.

“A firewall is a network security device that monitors incoming and outgoing network traffic and decides whether to allow or block specific traffic based on a defined set of security rules. Firewalls have been a first line of defense in network security for over 25 years. They establish a barrier between secured and controlled internal networks that can be trusted and untrusted outside networks, such as the Internet. A firewall can be hardware, software, or both”
(Cisco.com)

The security needs for home and business firewalls are different because of how hackers perceive their value. Businesses are more valuable targets to attackers than home users as they hold large amounts of data such as client details and trade secrets that can be sold. This gives hackers added incentive to coordinate complex, targeted, attacks not often seen on home networks.

Business-grade firewalls come with a much larger set of features needed to defend against these sophisticated attacks. The advanced firewalls utilized by businesses can provide many extra security features including managing individual ports, filtering packets, SSL inspection, geoblocking, and many more.

PROTIP: You can hire professional to take care of all this for you

Talk to a Professional

It may be tempting in the short term to stick with a cheaper option meant for home use, but a professional-grade firewall is a smarter decision for the future of your business.

If you need help getting this set up, or have other IT needs within your business, get in touch with Identity computing.

Malware Risks when Working from Home

Mon, 27 Jun 2022 02:18:54 GMT

In recent years many workplaces have been forced to make significant changes to the way their computer networks are structured.

Since adapting, some of these businesses have continued allowing their employees to work from home. This has led to ongoing concerns about how to maintain security when employees are working remotely.

There's a lot of misinformation about working remotely and little false security in some areas. Many people think that installing an antivirus makes them safe, but it’s just not true.

In this blog we will go through some key areas to focus on when managing a remote workforce.

PROTIP: Cybersecurity protects systems, networks, and programs from digital attacks.

What malware risks come with working remotely?

It’s important to understand that most applications these days are cloud-based. This means they will run in your web browser so the program’s code is running in your browser. This puts you at additional risk because people, like your staff, may click on things without thinking.

For example, let's just say your employees are using their personal computers at home for work purposes. They might think it’s fine to use it for non-work purposes and spend their lunch break Googling around for discount codes and click on something..

They might start back on their work after this not knowing that was a malicious website. It could have actually installed code in their browser. This code is called malware.

Now Malware can do a number of things. It can record keystrokes, which is what you're typing, and send that information off elsewhere. These keystrokes could include your username, your password, or a bunch of other important things.

Malware can also install some other software called command and control software. That software will allow an attacker to remotely take control of your machine. Their code can just sit there in the background until the attacker decides, maybe after hours, it’s a good time to go take over without getting detected.

Now, the critical thing to understand here, is you now have an intruder in your system who can do anything they want. They have access to all of your corporate resources and can send information out of your network. They can make copies of individual files or even make full backups and upload them anywhere they want.

You might never know any of this ever happened. Technically, none of this is a virus, so having your antivirus up to date doesn’t necessarily make you safe. There are a number of additional ways to protect your environment from threats like malware that aren’t classified as viruses.

How important is it for your workers to keep their systems updated?

You've got to have your antivirus up-to-date and also educate your employees about their behaviour and interactions on the internet.

Not everyone knows that antivirus programs need regular updating. It’s not something you can put off for a more convenient time.

Attackers are always finding new holes in your security and these updates ‘patch’ over these holes. Unless your antivirus is being updated regularly and you're keeping the operating systems patched your computer is at risk.

What education do workers need on working from home?

They need to be really careful with what they open, particularly attachments through emails. They also need to be careful about visiting untrustworthy websites and downloading files.

Even clicking on advertisements can lead to installing code on your browser. Not everyone knows about these issues so educating your staff is key. They need to understand what threats are out there so they can put measures in place for prevention.

PROTIP: You can hire someone to take care of all this for you

Talk to a Professional

At Identity Computing we know that most business owners are extremely busy getting things done and often IT becomes an afterthought. The cost and complex subject material can be frustrating and they just don't have the time or the brain space left over for that.

You still need to make sure to deal with your responsibilities as a company owner if you don’t have the time for these things. So get in touch with a professional and make sure they know what they’re doing.

The guy who does your system backups might not know anything about remote networking even if he seems smart and tells you he can work it out. IT has a lot of different specialties so do your research.

Remote Networking Internet Speeds

Mon, 30 May 2022 02:18:09 GMT

It’s no secret that remote working has taken on a life of its own around the World - and rapidly.

The demands of 2020 required businesses to expand workforce flexibility broadly and many of them have continued to allow their staff the flexibility to work from home.

For many, this initially came across as a great opportunity: commutes became unnecessary, schedules become more flexible, mornings were not so rushed — the list is wide and varied.

With those perks come the inevitable challenges and frustrations associated with networking and remotely accessing documents and files from home. New challenges may arise around the quality of your employee’s internet connections which can affect their productivity, and ultimately, your bottom line.

Small business owners have many questions and frustrations about how to adapt. Here are a few of our tips on what the issue could be.

PROTIP: Reputable organisations won’t ask you to pay for anything using gift cards.

Why are speeds fast sometimes and slow on others?

Most of Australia is connected via NBN (the National Broadband Network), and what most don't realise is that they have an asynchronous internet connection. That means that the upload speed of their internet connection is different to their download speeds. So typically, the download speed of your NBN connection is double that of the upload.

So let's say you can download at 50 megabits per second, and upload at 25. That's typical in Australia. So while you're in the office and bringing things down from the internet going about your work, you're doing so at this speed.

To get a reliable stream of information the connection at home has got to navigate a path through the internet competing with everything else on that’s online. We don't know the quality of this home internet connection. Perhaps your employee’s connection is bad or they've got their hourly NBN because it was cheap.

There are a number of peak times when a lot of other people get online. Your staff might find that their internet begins dropping out at three o'clock in the afternoon when all the kids are home from school, or at nine o'clock in the morning, or in the middle of the day.

Other things to consider are that it only takes one person to mess up your speeds if they’ve clicked on a massive download. This can use all of your bandwidth and starve everyone else.

So you can be working along quite happily and then suddenly get disconnected or become very slow. This could be a result of the fact that working remotely hasn't been factored into the design of your office network.

PROTIP: You can hire someone to take care of all this for you

So what can we do?

Remember that a person who knows how to remove viruses from your PC or reset your password will not necessarily understand internetworking traffic, quality of service etc. It’s best to engage a proper IT professional.

We can work out what applications you require access to, what traffic management is in place, and come up with a definitive answer. Don’t just throw money at the problem and hope it goes away. If you’re struggling you should hire a professional service like what we have here at Identity Computing. We can look at your network, understand what's wrong, and design a custom solution that’s right for your business.