11 essential steps to reinforce cybersecurity

1 June 2020 Cyber Security

The sudden, radical move to remote working during this time of lockdown for South Africa brings with it the promise of a new and more effective way of working – without being bound to a physical office. Not only does this surge in the use of remote work capabilities have massive implications on the corporate culture and on productivity levels; but it also brings with it more immediate consequences from a security and privacy perspective that cannot be ignored.

Wayne Olsen.

So says Wayne Olsen, head of the security business unit at Datacentrix. Together with the team of security experts at Datacentrix, Olsen has compiled a guideline of eleven steps to ensure that businesses and their employees are protected while working remotely.

1. Use only devices approved by your organisation.

“It is critical that staff avoid using personal computers and tablets – as well as those shared with others – to work. Other users may have inadvertently performed activities that infect shared devices, or cause leaked information,” Olsen explains.

2. Use the virtual private network (VPN) when necessary.

VPNs, which provide secure direct connections to an organisation’s network, might be necessary when accessing files, working with sensitive information, or using certain websites. At home, workers should remember to update their router’s software, and also secure it with a lengthy, unique password.

3. Think before you click.

Olsen advises remote workers to avoid downloading or clicking on unknown links in emails – always verify the identity of the sender, double check the authenticity and accuracy of the sender’s email address, and verify the request with your employer if you are uncertain.

4. Beware of coronavirus-themed phishing emails.

Cybercriminals are exploiting the coronavirus outbreak by sending fake emails, including dangerous links, to employees. Here’s how it works: The email messages may appear to come from company officials, and might ask you to open a link to a new company policy related to the coronavirus, or to enable remote access to the company’s VPN. However, clicking on the attachment or embedded link will most likely download malware onto your device. Don’t click. Instead, immediately report the phishing attempt to your employer.

5. Guard your devices.

If your organisation allows you to work from your home, never leave your laptop, tablet or mobile phone (including any USB or external storage devices) unattended, warns Olsen. “Another point that should be top-of-mind is to avoid entering passwords where others can see them.”

6. Create strong passwords.

These must include a mix of upper and lowercase letters, numbers and symbols. Make them difficult enough that someone can’t guess them.

7. Don’t share passwords online.

If you must share login information with a co-worker, says Olsen, call them with the details instead of sending via email, text or instant message.

8. Use two-factor authentication.

Although it can be inconvenient, two-factor authentication, if available, provides an extra layer of security to keep hackers from accessing accounts.

9. Update your devices.

“If you are using a personal device that has been approved for teleworking, be sure that it is running the most current operating system and that your web browsers and other applications are also up to date,” he adds. “Also, confirm that you are running the latest antivirus software solution. Updates include important changes that improve the performance and security of your devices.”

10. When in doubt, contact your organisation, or your ICT service provider’s helpdesk.

Remove the guesswork by allowing the professionals to advise on actions that are in line with your business’ cybersecurity practices and procedures. This way, you can ensure that you aren’t opening up your devices – or your corporate network – to cyberattacks.

11. Don’t forget about securing video conferencing solutions.

Video conferencing solutions have been a boon for companies across the globe, allowing them to continue to run internal and external meetings but on a virtual level. However, some platforms have come under scrutiny from a cybersecurity perspective, with individuals joining meetings as uninvited guests and claims of users’ social media pages being hacked. Whatever the video conferencing solution being used, businesses need to check that employees are aware of potential vulnerabilities, and take steps to tighten security measures on these platforms.

“Just as everyone is responsible for helping to prevent the spread of the coronavirus by changing their behaviour, everyone is also accountable – as cyber citizens – to ensure that we protect ourselves and our companies from the ever-growing security risks posed by COVID-19. Hackers do not discriminate and are making use of this pandemic for financial gain. It is important that we all remain cautious and follow the guidelines in order to mitigate all of these risks,” he concludes.

For more information visit www.datacentrix.co.za

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Work from home securely
Issue 5 2020 , Cyber Security
First Consulting provides enterprise-level IT security to working-from-home employees at more than 40 South African organisations.

Agility, meticulous alignment and testing
Issue 5 2020 , Cyber Security
Data loss can put the nails in the coffin for unprepared businesses. Investing in cyber resilience is key to succeed in the age of digital transformation.

Cybersecurity comment: Cyber threats remain relentless
Issue 5 2020, CA Southern Africa , Cyber Security
Over 80% of email-based threats in Q1 2020 leverage COVID-19 in some form to feign legitimacy to the end user.

Cybersecurity comment: Securing the real endpoint
Issue 5 2020 , Cyber Security
The corporate perimeter is fast becoming irrelevant, as the so-called security boundary extends to wherever an Internet connection exists.

Don’t squeeze your cyber assets
Issue 5 2020 , Cyber Security
Inadequate investment in cybersecurity is directly related to the spate of cyberattacks we’re seeing in South Africa now.

Cybersecurity comment: Create layers of security
Issue 5 2020 , Cyber Security
Any organisation, whether large or small, public or private, should follow an established framework in order to protect itself against cyber threats.

Next-generation security operations centre
Issue 4 2020, AVeS Cyber Security , Cyber Security
Pay-as-you-use cybersecurity from AveS allows all businesses access to world-class expertise.

Strengthen your passwords for world password day
Issue 4 2020 , Cyber Security
May 7 is World Password Day and KnowBe4 is providing tip sheets, videos and tools to help people strengthen their passwords.

Tips on secure remote working
Issue 3 2020 , IT infrastructure, Cyber Security
NordVPN advises how to stay secure while working from home during the coronavirus outbreak.

The Trojan that’s nearly impossible to remove
Issue 3 2020, Kaspersky , Cyber Security
xHelper – the Trojan that’s nearly impossible to remove – continues to infect thousands of devices. How can you stay safe?