We recently shared a ‘get to know’ story about our resident Cyber Security Expert, Derek Baillie. We want all friends of the extended Allied family to stay cyber safe, so we asked Derek to share some tips with us.
Cyber criminals don’t discriminate anyone can be a target so making a few changes or developing a few good habits can greatly reduce your chances of becoming a victim.
So, for Safer Internet Day here a few tips for staying safer online while at work or at home.
Passwords
Using strong, unique passwords is one good way to secure accounts but consider using three random words or passphrases to create easy to remember hard to guess passwords.
This method involves choosing three unrelated, random words and combining them into a single password. For example:
· CoffeeTrainPlanet
· RiverBookChair
· SunGlassTiger
It works because they are easy to remember but hard to guess, long enough to be secure and avoids common patterns or predictable substitutions.
Tips to make it stronger or compliant with password policies:
· Add numbers or symbols if required (e.g. CoffeeTrainPlanet!23)
· Don’t use personal or obvious words like names or birthdays
· Never reuse passwords across important accounts
Authentication
Turning on multifactor authentication (MFA), is an important step in securing your work or personal accounts and devices in the event of a data breach. Where passwords have known to be leaked MFA offers an easy to implement but hard to bypass layer of security.
By using two or three of the factors of authentication, accounts can be made far harder to compromise. The three factors of authentication are:
Something You Know
A password, PIN, or answer to a security question. This is the most common form but also the most vulnerable to phishing, guessing, or data leaks.
Something You Have
A physical device like a smartphone, security token, or smart card. Used to receive a one-time code or approve a login request.
Something You Are
Biometric data like a fingerprint, facial recognition, or voice pattern. This is very hard to replicate or steal.
Phishing/Social Engineering
Learn to recognise and report phishing attempts. Recognising the red flags of phishing and reporting greatly helps to help us strengthen our defences.
Red Flags in Emails or Messages
· Unexpected requests for login details, payments, or personal info
· Urgent or threatening language like “Your account will be suspended!”
· Spelling or grammar mistakes in professional-looking emails
· Suspicious links or attachments, hover over links to check the real URL
· Unusual sender addresses that don’t match the organisation they claim to be from
Phishing via Text or Phone
· Messages asking you to click a link or call a number urgently.
· Calls pretending to be from IT, banks, or delivery services asking for access or information.
Keep Devices and Apps Updated
Turn on automatic updates for phones, laptops, browsers, and security tools. Updates patch vulnerabilities that attackers exploit.
We hope you all stay safe out there on not only Safer Internet Day, but every day!
