CYBERSECURITY AWARENESS

Strong Password Practices

• Use long passwords (12–16+ characters).
• Combine uppercase, lowercase, numbers, and symbols.
• Avoid names, birthdays, company name, or “123456”.
• Never reuse passwords across systems.
• Use a password manager if allowed.
• Enable Multi-Factor Authentication (MFA) everywhere possible.

 Phishing & Email Awareness

Most cyberattacks start with phishing.Be cautious if:

• The email creates urgency (“Pay now!”, “Account will be suspended”).
• It asks for passwords, OTPs, or bank details.
• The sender’s email address looks slightly altered.
• It contains unexpected attachments or links.

⚠ Always:

• Verify links before clicking.
• Verify payment change requests via phone.
• Report suspicious emails to IT immediately.

Safe Internet Browsing

• Do not download cracked software or unknown files.
• Only install approved company applications.
• Avoid clicking pop-ups claiming “Your PC is infected”.
• Ensure websites use https:// before entering credentials.

 Device Security

• Lock your computer when away (Windows + L).
• Do not share company laptops with family/friends.
• Keep antivirus enabled.
• Allow system updates (Windows, macOS, browsers).

Public Wi-Fi Safety

• Avoid accessing company systems on public Wi-Fi.
• If necessary, use a company-approved VPN.
• Never conduct financial transactions on open networks.

 USB & External Devices

• Do not plug unknown USB drives into company computers.
• Scan external storage devices before opening files.

Social Engineering Awareness

Attackers may call pretending to be:

• IT support
• Bank officials
• Suppliers
• Company management

Never:

• Share passwords
• Share OTP codes
• Approve unknown login notifications

IT will NEVER ask for your password.

Data Protection & Confidentiality

• Do not share company data via personal email.
• Encrypt sensitive files if required.
• Avoid discussing confidential matters in public places.
• Shred sensitive printed documents.

Backup Awareness

• Save work in company-approved systems (server, cloud).
• Do not store critical files only on desktop.
• Understand that ransomware can lock files.

Incident Reporting

• Suspicious emails
• Lost/stolen devices
• Accidental data sharing
• Strange computer behavior

⏱ Early reporting can prevent major financial loss.

Why This Matters

Cyberattacks can lead to:

• Financial loss
• Data breach
• Business shutdown
• Reputation damage