登录查看更多内容

How do you advise your customers on computer security?

由人工智能和领英社区提供技术支持

Computer security is a vital aspect of maintaining your devices and protecting your data from malicious attacks. As a computer repair professional, you have the responsibility and the opportunity to advise your customers on how to keep their computers secure and avoid common pitfalls. In this article, we will cover some of the best practices and tips that you can share with your customers on computer security.

在这篇协作文章中查找专家回答

由社区从 5 条内容中精选。了解更多

1 Update your software

One of the simplest and most effective ways to improve your computer security is to update your software regularly. Software updates often include patches and fixes for security vulnerabilities that hackers can exploit to access your system or data. You should update your operating system, antivirus, browser, and any other applications that you use frequently. You can also enable automatic updates or reminders to make sure you don't miss any important updates.

添加您的观点

Samuel B.

Group Chief Information Security Officer | Ex - F1
举报内容
Updating software is a relatively easy task for an SME, especially one outside of the tech industry. Those that use endpoints, mobiles, etc, such as Windows and iPhones can use InTune and enhance the automation with third party tools, all of which require very little management compared to the SCCM days, it is very easy to update these devices with very minimal user impact. Remember, your user is the most susceptible to attack; they click phishing links, they browse the internet at lunch. Then we have tech firms or larger organisations with legacy software, and the release cycles are either non-existent or infrequent. It is imperative to threat model to understand the risks and implement compensating controls.

已翻译

赞

2 Use strong passwords

Another essential step to secure your computer is to use strong passwords for your accounts and devices. Strong passwords are long, complex, and unique, meaning they use a combination of letters, numbers, symbols, and cases, and they are not reused for different accounts or services. You should also avoid using personal or obvious information in your passwords, such as your name, birthday, or pet's name. You can use a password manager or a passphrase generator to create and store strong passwords securely.

添加您的观点

Samuel B.

Group Chief Information Security Officer | Ex - F1
举报内容
Strong passwords are important, but multifactor authentication and single sign-on are as or more important to negate the accidental disclosure of a password. Those businesses starting up may think a password is enough, yet may not know the history of credential stuffing. Any time a data breach happens your username and password is compromised. Malicious hackers will use those leaked credentials across all sorts of platforms in an attempt to access them. So to really protect an organisation: 1. A strong password policy, to ensure an easily guessable password is not used, NIST has great guidance on this. 2. Enable bad password checking in your identity provider. 3. Use SSO and MFA. Finally 4. consider biometric or passwordless security.

已翻译

赞

3 Avoid phishing and malware

Phishing and malware are common methods that hackers use to trick you into revealing your personal or financial information, or installing malicious software on your computer. Phishing is when you receive an email or a message that looks like it comes from a legitimate source, such as your bank, your employer, or a government agency, but it actually contains a link or an attachment that leads you to a fake website or downloads malware on your computer. Malware is any software that can harm your computer or data, such as viruses, ransomware, spyware, or adware. You should avoid clicking on any suspicious links or attachments, and always verify the sender and the website before entering any information. You should also scan your computer regularly with a reputable antivirus program and delete any unwanted or unknown files.

添加您的观点

Samuel B.

Group Chief Information Security Officer | Ex - F1
举报内容
Some of the most technical and experienced people I have met have at one point fallen for phishing. It's inevitable, we are all busy, we sometimes make mistakes. Clicking on the link on its own may result in malware, but mostly they are after your credentials. This is where most who have fallen foul will realise their mistake. Even if they enter their credentials you should have your identity provider checking for suspicious logins, impossible travel and similar. Your MFA should stop a malicious actor with a bad password. BUT.... a blameless culture encourages disclosure. If a user does not feel judged for entering their credentials, kill their sessions, view logs to see access, but treat this as a pringboard for improved training.

已翻译

赞

4 Use encryption and backup

Encryption and backup are two important measures that can help you protect your data in case of a security breach or a hardware failure. Encryption is when you use a code or a key to scramble your data, making it unreadable to anyone who does not have the code or the key. You can encrypt your hard drive, your external drives, your email, or your online accounts with various tools and settings. Backup is when you make a copy of your data and store it in a different location, such as a cloud service, a flash drive, or another computer. You should backup your data regularly and keep multiple copies in different places.

添加您的观点

Samuel B.

Group Chief Information Security Officer | Ex - F1
举报内容
Throughout my career I have met people whose role it was to backup an environment, but they see it as a best effort exercise. It wasn't working for months, but they were slowly trying to fix it. Guess what happened? If you aren't doing a backup/restore every 3-6 months, can you really be sure that if your entire estate was wiped you could recover from it? If the answer is no and you manage your technical departments, ask them for a test restore report from them ASAP. One small task being forgotten can bring an entire business to its knees.

已翻译

赞

5 Educate yourself and your customers

Finally, one of the best ways to improve your computer security is to educate yourself and your customers on the latest threats and trends in the cyber world. You should stay informed and updated on the new types of attacks, the best practices, and the available resources that can help you prevent and respond to security incidents. You should also share your knowledge and experience with your customers, and help them understand the importance and the benefits of computer security. You can provide them with guides, tips, newsletters, or workshops on computer security topics that are relevant and useful for them.

添加您的观点

Samuel B.

Group Chief Information Security Officer | Ex - F1
举报内容
Users are going to cause you a breach, through accident such as phishing or ransomware, or by misconfiguration of ingress points to critical information. Do you do regular security training? Do you train users in positions with greater risk, do you even know who your risky users are? Do you run regular phishing campaigns? Do you send out communications when there is a known threat prevalent in the wild? If not, please think about implementing these processes, the more a user is aware, the less risk you bring to an organisation.

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Computer Repair

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you advise your customers on computer security?

1

2

3

4

5

6

1 Update your software

2 Use strong passwords

3 Avoid phishing and malware

4 Use encryption and backup

5 Educate yourself and your customers

6 Here’s what else to consider

Computer Repair

给文章评分

感谢您的反馈

更多Computer Repair相关文章

更多相关阅读内容

How do you advise your customers on computer security?

1

2

3

4

5

6

1 Update your software

2 Use strong passwords

3 Avoid phishing and malware

4 Use encryption and backup

5 Educate yourself and your customers

6 Here’s what else to consider

Computer Repair

给文章评分

感谢您的反馈

查看其他技能