10 Simple Cyber Security Tips

Innovations Development Lab
4 min readOct 15, 2020

— From Ukraine with love.

In Ukraine, we know cyber security. Remember, although isolated to Eastern parts of the country, there is a hybrid war taking place. This means that the Ukrainian government and private companies are repeatedly tested. We had to learn, fast.

Cyber Security for organizations and Cyber Hygiene for individuals are concepts that we have adapted. Even before covid-19 where remote work has become the new normal, operations by businesses, governments, people were processed by computers.

October is Cyber Security Awareness Month, so in addition to social distancing, hand-washing and masks — we have 10 simple Cyber Hygiene tips, to keep you and your organization, safe.

1. Make a plan of action in case a threat is detected.

A plan is the first line of defense. Even a simple plan is better than nothing. Focus your plan on 1. Immediately resolving a breach, 2. Minimizing losses, 3. Clear delegation of tasks to colleagues.

2. Perform vulnerability scanning and penetration testing

Regular testing of security systems proactively identify “gaps” in your cyber perimeter. This allows your organization to identify and fix vulnerabilities before an attacker can exploit them.

3. Update applications and operating systems in your network

A simple way of protection is continuous updating of software. These updates include new information from solution providers based on their own testing.

4. Train staff to monitor cybersecurity

For years, cyber criminals have successfully used ‘phishing’ techniques to steal information via seemingly harmless e-mails, videos, and other Trojan horses. If in doubt, don’t connect. Email links, social media notes, messages, and online advertisements are often created by cybercriminals. If the letter looks suspicious, even if you know the recipient, it is better to delete the letter, if appropriate, mark it as junk mail. Tell your staff!

5. Actively and continuously monitor your network/intranet

Set up or assign continuous monitoring of your organization’s network for anomalous activity that could signal a data breach in real-time. Also remember, USB and other external devices can be infected with viruses and malware. Scan such devices for malware as soon as you plug them in.

6. Audit your data.

Know what data is stored, where — especially sensitive information. This helps prioritize and focus your cybersecurity hygiene.

7. Regularly check authorized users and account privileges

Who has access to your organization’s systems? Check your privileges and make a list, especially for those with ‘administrative access.’ Administrators often have unlimited access along with the ability to create new accounts and can change permission settings for other users. A common goal for hackers after gaining access to the network is to create access to the administrator account, and control privileges.

8. Make regular backups of data

The presence of only one copy of the organization’s data exposes companies to significant risk of data loss. Human error, unexpected system failure, natural disaster, or other problems can cause data losses. Periodic backups always provide a safety net in the worst case scenario.

9. Constantly update your security system

Hackers use the latest technologies to gain access to your systems, so you should use the latest security tech to protect your business. This starts with basic updates to Windows or iOS on working computers, but continuous to apps on work phones, and staying aware of recent hacks.

10. Carry out a cybersecurity assessment

Using a (trusted) third-party consultant to conduct a cybersecurity assessment creates a tangible baseline for analyzing the current state of your cyber security preparedness. It starts the process of creating an actionable list of measures to improve security.

As the pandemic has taught us, simple steps make big changes that can keep you and your organization safe. If you need any help, let us know.

-Masha Hanzelo, co-founder, InDevLab Ukraine

InDevLab is an Official Cyber Security Champion of the National Security Alliance, together with the US Department of Homeland Security. Find out more at https://www.cisa.gov/national-cyber-security-awareness-month

--

--