Most IT incidents that bring an organisation to a halt do not come from sophisticated attacks. They come from a missing backup, a computer that was never updated, or a phishing e-mail opened too quickly. Here are five simple habits that greatly reduce these risks.
1. Back up, and check that restores work
A backup is only worth something if it can be restored. Follow the 3-2-1 rule: three copies of your data, on two different media, one of them off site. Regularly test restoring a file or folder.
2. Install updates without delay
Updates for Windows, software and network equipment fix known weaknesses that attackers target first. Turn on automatic updates on workstations, and schedule server updates.
3. Strengthen passwords and turn on two-factor authentication
A long, unique password for each service, kept in a password manager, is better than a complex password reused everywhere. For e-mail and remote access, turn on two-factor authentication: even if a password leaks, the account stays protected.
4. Learn to spot a phishing e-mail
Unknown or slightly altered sender, unusual urgency, unexpected attachment, a link asking you to sign in again: these are the classic signs of phishing. If in doubt, call the sender to check before clicking.
5. Limit access rights
Each person should only access the data they need. Remove access for people who leave the organisation on their last day, and keep administrator rights to a few accounts.
Where to start?
If you are not sure where your organisation stands on these five points, a security audit measures it and helps you prioritise. See our cybersecurity service or request a quote.