Tuesday, January 19, 2021

Cyber Security | Security Tips on Work from Home

Security Tips on Work from Home

Coronavirus Pandemic have enabled us to Work from Home. It means we have to setup an infrastructure at home to continue the Job. Home has become the new office. As on date of writing this post, many firms, organizations have resumed their office. But still the virus is not gone forever across globe. Many other strains of It has been mutated and infecting people somewhere. Keep the below tips for your reference while working at home. 

In general you need to focus on below points;

  • Network Security
  • Software and Asset Security
  • Email Security
  • Portable Media security
  • Password security and Management 
  • Privacy protection
  • Web security
  • Avoid Phishing traps

Below are the tips in descriptive to above areas of security:

  • In network security part, you must use secure Wi-Fi network and secure VPN connections. Always use the company provided VPN and links. Use encryption. Keep your Operating system software and other application software updated. Use licensed software and install security patches in time. Never install free antivirus, free games. 
  • Business Email is a critical part of communication. It is also one of methods that hackers use to gain access to sensitive information and organizational data. Use strong spam filtering option for official and personal emails. Never forward a company email to personal email accounts. Never enable macros in word files received from unknown senders.
  • Perform a routine scan on hard disk drive, USB drives using updated antivirus. Use encrypted USB drives.
  • There should be good and strong password management. Never share your password to others, not even to your boss. Keep the password using long phrases and use passwords with strict password policy like 8 characters with a combination of alphanumeric and special characters (#@$%*). Use passwords in regular intervals like your toothbrush. Use two-factor authentication (2FA) where it is available to ensure that the password is not enough to login or access.
  • While visiting multiple web sites or web surfing, do visit only trusted web sites by checking a lock symbol or https at the start of the web address. Disable auto downloads and check download folder in time. Never enable save password option in the browser while prompting.
  • Phishing has been rising now a days at every small to large organizations. It uses fraud messages and emails to trap the recipient. A common indicator can be helpful to know the phishing attack details.
  • Always check for wrong spellings, mistake in layouts, wrong mail address of sender, suspicious attachment, spoofed hyperlinks, generic signatures etc.


So in the last, keep your data baked up in time to avoid the loss of data. 

-DR

No comments:

Post a Comment

Network Scanning Tools

Network Scanning through Nmap and Nessus Network scanning is a process used to troubleshoot active devices on a network for vulnerabilities....