End-User Security Training, why does my business need it?
Anti-virus is standard, Endpoint Detection Software is good, Backups are great, but what is the most important thing you can do to protect your users and infrastructure? Train your end-users on all the things they need to know about cyber-security! The goal of end-user security training is to educate your end-users to understand, identify and avoid cyber threats is a critical piece to preventing harm to the organization.
Some of the important, high-level content that you should educate your end-users on:
- Use Strong, Unique Passwords: Every user should have a unique account, and every account should have a different password and changed regularly.
- Enable Multi-Factor Authentication: If the application or service offers MFA, then enable it and use it. Passwords are NOT enough. You would be amazed at how many attacks would be avoided if MFA was simply enabled.
- Recognize and Report Phishing: Understand what a phishing email looks like, and what to do/not do with phishing emails. Know the tell-tale signs of a phishing scheme and report those immediately.
- Be Wary of Unsolicited Phone Calls: Never provide any personal or company information over the phone unless you are expecting the call, AND you have properly verified the caller’s identity.
- Use Secure Wi-Fi Networks: Always avoid unsecured public Wi-Fi networks. If you have no choice, use a reputable VPN connection to secure encrypt.
- Don’t Plug in Unknown USB Drives: Never connect any USB drives to your workstation – they could be infected with malware.
- Secure Your Workstation: What simple things can you do to protect your own workstation? Lock the screen using the Windows + “L” keys when you walk away.
- Be Careful with Social Media: Think before you post about potentially sensitive information about you or the company. Know what NOT to click on in the various social media platforms.
- Avoid Suspicious Downloads: Don’t download files, applications or images from any sites/sources that you don’t trust. Stay away from websites that are not secure.
- Follow Company Policies: Adhere to your company’s IT security policies and guidelines, and stay informed about new procedures.
This is just a quick list of ten things you can train your end-users today to help protect against cyber threats.
Or, you can subscribe to a comprehensive end-user security training platform which handles enrollment, compliance and of course the content. End users are presented carefully curated content designed to educate them on how to thwart cyber attacks and be safer online. LANConnect offers this service to all of it’s Clients, contact your account manager for more details.
