Cybersecurity Guide

What is cybersecurity? Imagine it's like your home security system (alarms, strong locks, cameras), but for protecting the company's information and equipment in the digital world.

Why is it important? If a thief breaks into the company's "digital house," they could steal valuable information (like customer data or company secrets), cause chaos (disrupt work), or damage our reputation. It affects everyone!

Your role is key: Each of us is like a watchguard. If one is careless, they can leave a "door open" for the bad guys. We are all the first line of defense!

What is phishing? It's like a tricky fisherman casting a hook (a fake email, message, or call) hoping you'll "bite" and give them your personal information or click on something dangerous.

Types of scams:

• Phishing (email): The most common. Emails that look like they're from banks, well-known companies, or even coworkers!
• Vishing (voice/phone): They call you pretending to be from tech support or the bank.
• Smishing (SMS/messages): Text messages with suspicious links or asking for information.

How to spot them?

• Suspicious sender: Is the email address weird? (e.g., bank@secure-mail.com instead of @officialbank.com)
• Urgency or threats: "Your account will be blocked if you don't act NOW!"
• Spelling or grammar mistakes.
• Strange links: Hover over them (don't click!) to see the real address.
• Unexpected attachments.
• Odd requests: Is your boss emailing you to urgently buy gift cards? Be suspicious!

What to do if you're suspicious? NEVER click, download anything, or reply! Report it to the IT team immediately.

What is a strong password? Think of it as your house key. A simple key (like "12345") is easy to copy. A complex key, with many different notches, is much more secure.

A strong password should be:

• Long: At least 12-15 characters. The longer, the better!
• Complex: A mix of uppercase (ABC), lowercase (abc), numbers (123), and symbols (!@#$).
• Unique: Don't use the same password for everything!

Common mistakes (Avoid them!):

• Using pet names, birth dates, "123456", "password", "qwerty".
• Reusing passwords on multiple sites.
• Writing them on a sticky note attached to your monitor.

Password managers: They are like a secure digital vault for all your passwords. You only need to remember ONE strong master password. (e.g., LastPass, 1Password, Bitwarden).

Two-Factor Authentication (2FA/MFA): It's like adding an extra deadbolt! Enable it whenever you can, especially on important accounts!

The internet is like a big city: there are great, safe places, but also dangerous alleys. Learn to navigate carefully!

HTTPS and the padlock (): When you see "https://" and a closed padlock, the communication is "armored" (encrypted). Especially important for shopping or personal data!

Avoid suspicious websites:

• Pages with tons of flashing ads or aggressive pop-ups.
• Sites that ask you to download programs "to see better" out of nowhere.
• Pages with design errors, bad spelling, or that just "feel weird."

Download with caution: Only download from official and trusted sources.

Public Wi-Fi networks (Be careful!): Wi-Fi in cafes, airports, etc., are like a public square: anyone could be listening! If the company provides a VPN, use it!

What is confidential information? These are the company's "treasures": customer data, secret plans, financial numbers, strategies... and also your personal information!

Share securely:

• Don't use personal WhatsApp or Gmail to send work files if it's not authorized. Use tools provided by the company.
• If you need to send something very sensitive, ask IT if there's a way to encrypt it.

Clean desk (physical and digital!):

• Don't leave documents with sensitive information visible on your desk. Lock them up!
• Lock your computer (Windows + L) whenever you get up.
• Don't have files with passwords or customer data visible on your desktop.

Secure destruction: Papers with confidential information must go to the paper shredder!

Your phone or tablet are pocket computers, and they need security too!

ALWAYS use screen lock: Use a strong PIN, a complex pattern, your fingerprint, or facial recognition.

Apps only from official stores: Only download from Google Play Store or App Store. Downloading from strange sites is like inviting a stranger into your home.

Review app permissions: Does a flashlight app need access to your contacts? Suspicious! Grant only necessary permissions.

Keep software updated: Updates often include security patches that fix "holes" hackers could use.

Beware of Wi-Fi and Bluetooth: Disable them when not in use.

USB drives are super useful, but they can also be a gateway for viruses!

Don't connect unknown USBs! If you find a USB drive lying around, DO NOT connect it to your computer! It could have a virus that installs automatically.

Analogy: It's like finding unwrapped candy on the street. Would you eat it? No! An unknown USB is just as risky.

Scan USBs (if you must use them): Notify IT first. They can scan it with antivirus software in a safe environment.

Be careful what you copy: Don't copy confidential company information to personal USBs if it's not allowed.

What is a security incident? Anything unusual or suspicious that endangers the company's information or systems.

When and how to report? AS SOON AS POSSIBLE!

• Reporting channel: [YOUR IT SUPPORT CONTACT HERE].
• What to report: Describe what happened, when, what you saw. The more details, the better!

Why is it so important to report quickly? Imagine there's a small fire. If you alert quickly, firefighters (IT) can put it out before the building burns down.

Don't be afraid to report: It's better to report a false alarm than not report something serious!

Here you'll find answers to common questions. Don't hesitate to ask IT if you have others!

Have more questions? Contact the IT team!

[YOUR IT SUPPORT CONTACT HERE]