As a computer repair professional, you know how important it is to secure network access and data for your clients. But do your users know how to protect their devices and information from hackers, malware, and other threats? In this article, you will learn how to train your users to secure network access and data with some simple and effective tips.
One of the easiest ways to secure network access and data is to use strong passwords for all accounts and devices. A strong password is at least 12 characters long, includes upper and lower case letters, numbers, and symbols, and is not easy to guess or crack. You should also avoid using the same password for multiple accounts or devices, and change your passwords regularly. You can use a password manager tool to generate and store your passwords securely.
Passwords are still the number one method of authentication used today-and there are a plethora of them in almost everyone's lives. So many, in fact, that it would almost be impractical to manually track them all on paper, though this is an alternative. Paper cannot be hacked but it can be destroyed or lost. Instead, I recommend the use of a password manager and for that I prefer Bitwarden. It's free, fast and secure and stores your credit card information as well as logins. It also boasts a powerful password generator function to save you the labor of struggling to meet complexity requirements. I've installed it for several of my coworkers now at their request.
- In my experience strong passwords are not enough. Keeping in mind all passwords are brute force cracked prone, an MFA solution along with 60 days or less password change policy is at must.
Finally, it is crucial to keep your security technology up to date. Make sure that you are regularly installing security patches and updating your network infrastructure. Be sure to use firewalls and encrypted traffic to protect your network and data from external threats.
The most effective solution to improving security in the majority of organizations is to UPDATE. Many organizations think their security plan generated in the 90s (by an intern they likely didn't pay well) is a definitive guide for users to do business because at the time the risk associated was nearly nothing. Many organizations think their decade old, vendor installed networking hardware is enough, despite not paying for maintenance and knowing nothing about the equipment installed in your drop ceiling/under Dave's desk. Many organizations don't even know that under Dave's desk is a TERRIBLE place for that to go, even if Dave is super cool with resetting the router. Update your infrastructure and documentation! And thank Dave!
Install and monitor firewall performance. Update Passwords When Needed and/or Yearly. Lean on Advanced Endpoint Detection. Create a virtual private network (VPN) Train your employee. Filter and delete spam emails. Shut down computers when not in use. Encrypt your files.
Another way to secure network access and data is to enable multi-factor authentication (MFA) for your accounts and devices. MFA is a method of verifying your identity by requiring more than one piece of evidence, such as a password, a code sent to your phone, or a biometric scan. MFA can prevent unauthorized access even if your password is compromised. You should enable MFA for any account or device that supports it, especially for sensitive or critical data.
MFA is part an parcel of Oak Street Health. In order to log into almost anything we are required to use an authenticator called Okta Verify. Having multiple steps required to log into work applications can be cumbersome as there is an inverse correlation between security and ease of use. Unfortunately, due to cybercrime MFA is an absolute necessity and I highly recommend it to protect yourself and your accounts.
Using MFA allows you to forgive the user for not using a strong enough password even, as they do. MFA and a strong password is an incredible combination!
A third way to secure network access and data is to update your software regularly. Software updates often include patches and fixes for security vulnerabilities that hackers can exploit. You should update your operating system, applications, browsers, antivirus, and firewall software as soon as possible when new versions are available. You can also enable automatic updates or set reminders to check for updates frequently.
You actually should not always update your software as soon as a patch comes out, especially with Microsoft. Technology is a rat race with each player trying to outdo the other. The net effect is that they roll out products, in this case software that isn't always as secure as it could be, hence patches. Well, the patches can in themselves have flaws. I prefer to wait a month and allow others to "test" the integrity of the code I'm about to apply to my production system. If it fails in the interim then I am unaffected. So yes, you should patch, just be smart about it
Patches and updates should be applied in a sandbox environment and tested before they are rolled out to the whole system. Untested updates risk malware and/or bugs inhibiting operation.
A fourth way to secure network access and data is to encrypt your data. Encryption is a process of transforming your data into a code that can only be read by authorized parties with a key. Encryption can protect your data from being intercepted, stolen, or tampered with. You should encrypt your data when you store it on your device, when you transfer it over a network, or when you back it up to a cloud or external drive. You can use encryption tools or settings to encrypt your data.
Well, there are two levels of encryption. FDE (Full Disk Encryption) and File Level Encryption. An example of FDE is Microsoft's "Bitlocker" and Veracrypt, a third party solution that I prefer. Microsoft also provides file level encryption of individual files using EFS (Encrypting File System) which is natively included in NTFS. The benefit of encryption is it renders all your data unreadable to those who would seek to steal it. It should be noted that if someone has remote access to your system while you are logged in or if they divine your password then encryption is effectively defeated.
Encrypting your removable media storage such as an External Hard Drive or Flash Drive is just as important as your local drive. Built-in tools such as Windows Bitlocker and macOS FileVault are perfect for this job and included with your Operating System at no additional costs out of your pocket. Protecting your data with encryption is essential to mitigate security risks.
A fifth way to secure network access and data is to educate yourself and others about the risks and best practices of cybersecurity. You should learn how to recognize and avoid common cyberattacks, such as phishing, ransomware, and spoofing. You should also teach your users how to secure network access and data, and create a culture of security awareness and responsibility. You can use online resources, workshops, newsletters, or posters to educate yourself and others.
A sixth way to secure network access and data is to monitor your network and devices for any signs of suspicious or malicious activity. You should use tools or settings to track and log your network traffic, device performance, and user activity. You should also scan your devices for malware and viruses regularly, and report any incidents or breaches to the appropriate authorities. You should also review and audit your network and device security periodically, and make improvements as needed.
Creating a whitelist in the server environment for your network, which is a list of the only devices allowed on a network can be a great tool to minimize risk in a network environment. If a device is reported stolen, that device name can easily be removed so that even with a password, nefarious actors will no longer be able to access network resources. It is also very important to regularly audit user's level of access to the network. User's should always have the minimum access that they needed to perform their job. This greatly increases security.
Beside of all mentioned six ways to protect the network and data from cyber-attack, i recommend that IT department mush periodically update all staff for the zero-day attacks and recent threats, and as well as provide the soultions and instructions to defeat.
Drills, drills, and drills. To train people well, we should never get tired of doing attack tests. Social engineering is the biggest problem which uncovers all the other measures we have put in place, and yet we may not have direct control. Our networks are as secure as the resilience of our end users to social engineering. We need to always create awareness of phishing, pretexting, vishing and any other forms out there.