Cyber Security Awareness
Cyber Security Awareness
Awareness
Prepared by:
NIC-WCD
Cyber Security Awareness
Cyber Security is the state or process of protecting and recovering computer
systems, networks, devices, and programs from any type of cyber-attack. Cyber security
measures are designed to combat threats against networked Systems and applications,
whether those threats originate from inside or outside of an organization.
Need of Cyber Security- Our society is more technologically reliant than ever before
and various aspects of our being are heavily driven by technology e.g. power, industries,
law and order, safety etc. Cyber security thus gains paramount importance as it is
imperative for protecting these data sources and IT infrastructure from being misused.
This includes sensitive data, official data, personally identifiable information (PII),
protected health information (PHI), personal information, intellectual property etc.
1) Confidentiality
2) Integrity
3) Availability
Password
Always follow password policy for creating password to avoid risks involved.
Do use hard-to-guess passwords or passphrases. A password should have
a minimum of 10 characters using uppercase letters, lowercase letters,
numbers, and special characters Do change password at regular intervals.
Do use different passwords for different accounts.
Do keep your passwords or passphrases confidential.
Do change password immediately if it is suspected to have been disclosed /
compromised and a security incident shall be reported to the competent authority.
Be careful while entering a password when someone is sitting beside you.
Computer / Laptop
Do lock your computer and laptop when not in use.
Do keep all devices, such as laptops and computer physically secured.
If a device is lost or stolen, report it immediately to competent authority.
Antivirus software should be installed on computer and it should be kept updated.
Portable Media
Do lock portable media containing sensitive information in a drawer to
reduce the risk of unauthorized disclosure.
Do destroy information properly when it is no longer needed.
Do use official portable storage media for official purpose and should not
be handed over to unauthorized person.
In case of loss of official portable storage media, it should be reported to
the competent authority at the earliest.
Wireless Connectivity
Do remember that wireless is inherently insecure. Avoid using public Wi-Fi hotspots.
When you must to use Wi-Fi, use VPN to protect the data and the device.
Do ensure that the wireless interfaces are disabled by default.
Don’t forget to delete browsing history which deletes all the cookies, temp
files, history and ActiveX filtering.
Don’t forget to turn off all JavaScript or ActiveX support in your web
browser before you visit any unknown websites.
Don’t give any personal information in any untrusted links.
Don’t allow pop-ups and plugins; disable them in the browser settings.
Web Application
Security patches and software updates should be installed as soon as they are available.
Social Networking
Do use privacy settings on social media sites to restrict access to your personal information.
Only add people you KNOW offline.
If must add strangers, keep your guard up.
Convincing imitations of banks, card companies, charities and government
agencies should be watched out carefully.
Privacy settings of profile should be checked and make sure they are set to the right
level. Even if social network is set to private, it doesn’t guarantee that information is
completely private. It should be remembered that friends’ friends might be able to see
posts and updates even if they are not friends with them. So be careful.