Protecting an organization from cybercrime is increasingly important as businesses modernize, digitally transform, and move to the cloud.
Too often, cybersecurity is seen as an overly complicated endeavor. Don’t get me wrong, it’s essential for any organization to have robust protocols in place to protect against cybercrime. But getting the basics right takes you far enough already! This is increasingly true as organizations undergo digital transformations, migrate to the cloud and make use of new technologies.
According to the Texas Insurance Blog, an unlocked car was a factor in about half of the 17,000 stolen cars in the state from 2017 to 2019. While a car lock can be cracked, it’s a sufficient security measure in many cases. This is because many of these attempts are crimes of opportunity where a simple lock is sufficient deterrence.
Likewise, most IT managers know that corporate server logs are polluted by attempted cyber security attacks. Indeed, cyber crimes are a common occurrence. Web Arx Security reports that 30,000 websites are hacked every day. If we think of cybersecurity as a crime of opportunity, there are similar protections that could be applied that could keep most hackers out.
In the same way that locking up your car can protect you from potential crimes, doing these three things can protect your devices: change your passwords regularly, update your firmware, and renew your SSL certificates.
See also: Cyber security will change in 2023 thanks to artificial intelligence
Strengthen password security
A study by Google and Harris Poll found that 59% of adults in the US use something easy to guess (like a name or birthday) in a password. Even worse, a GitHub page shows that the most popular passwords are some variant of “123456”, “Password” and even “abc123”. But probably the most concerning stat of all: Google concluded that less than half of Americans said they would change their password if they found out their account was hacked, by which time it’s already too late to protect personal information.
While technology like PassGan has been used to predict more than a quarter of LinkedIn profile passwords, IT experts believe they can use that information to actually educate others about common passwords, identify people who need more passwords, and even lead training courses on cyber security between workplaces.
Most cybersecurity experts recommend updating your passwords every 30, 60, or 90 days, depending on your account. Establishing strong and complex password policies, as well as changing them regularly, safeguards accounts.
See also: Why Organizations Should Take the Cybersecurity Risk Optimization Approach
Maintaining system updates
Attitudes toward cybersecurity don’t change much when it comes to software updates. The National Cybersecurity Alliances’ 2022 Cybersecurity Behaviors and Attitudes report found that 12% of people rarely or never complete updates, while another 25% said they only sometimes.
Updating firmware is an important part of cybersecurity practices that can help protect your devices from security threats and cybercrimes.
Firmware updates might include bug fixes, security patches, and other improvements that can thwart a cyberattack. These updates apply to the firmware that runs operating systems, antivirus software, but also web browsers, email accounts and other applications on any device.
See also: Rapid cloud adoption requires SOAR-based cybersecurity
Renewal of SSL certificates
SSL (Secure Sockets Layer) certificates play a crucial role in the information security of servers and websites. These certificates establish a secure connection between a web browser and a web server. The certificate is granted by a trusted third party which confirms to your web browser that you are getting the website you expect from its real source (that company’s web server). The certificate encrypts the information transmitted between them and protects sensitive data from interception and theft by hackers. SSL certificates protect everything from usernames and passwords to credit card numbers and other personal or financial information.
You can tell if a website is using an SSL certificate if the URL starts with “https” instead of “http” and a lock icon appears in the address bar of your web browser.
SSL certificates require regular updates, renewals, or replacements to ensure security. They typically have an expiration date that can range from one to three years. While they may expire, SSL certificates may also need to be updated to address security vulnerabilities. Updating the certificates is the responsibility of the server administrator. As a user, if you see an error related to that site’s SSL certificate, proceed with caution, as you may have landed on a fake website masquerading as your intended destination.
Protecting an organization from cybercrime doesn’t have to be complicated. Start with some basic but extremely important security measures, including making your passwords more secure, keeping up with system updates, and keeping your SSL certificates current. This won’t stop all hackers from trying to wreak havoc on your organization, but it will at least ensure that they can’t get in through an open door!
#protect #cybercrime #RTInsights