Safety tips
Best way to avoid damages after cyberatack
Having backups
A email atachment trying to trick the user
Why is using a windows XP conected to public internet and not a proper firewall
Old software has known vulerabilities
Someone conects a device to a network port and it gets acces to the internal network
IP control via DHCP and not having unused ports as running
What is a firewall?
A device/software used to allow/block acces of network packages
What should be done after a cyberatack(fishing) is neutralized and everything restored (In a company)
Employees must be tought how to avoid this to happen again
Infected software that allows remote acces...
Trojan
A computer running an outdated operating system without security updates
Missing security updates / unpatched vulnerabilities
A pc that can mount usb storage devices
Any pc that is not meant to install usb storage should have that option disabled
What is a security patch?
Software update that is specific of a security vulnerability
Software used to detect viruses and other threats
Antivirus
Type of virus that replicates itslef on the network
worm
Lack of employee cybersecurity awareness
Human error / lack of security awareness
Walking throug the office you see a sticky note with a password...
Users shall be tought how to use a pasword manager and to not keep paswords exposed
What is a strong password policy?
Passphrases, with caracters, numbers, mayus, minus, unrelated, unordered with over 15caracters
If a computer gets infected you should...
Disconect the computer off the network to avoid replication or remote acces
Powering it off could destroy the virus so its not recomended for analysis, and any compromised device should be treated as lost data
Atack where a user interceps and manipulates data and sends it as trustworthy
A user got its password compormised, why?
Weak passoword/protocols (ot lack of them), reuse of a pasword...
Someone disconected something in the rack
Having a acces control and cameras
Acces control is used to
Allow or block acces o certain zones or areas. This could be in a software lever of phisical acces
Software/device that avoids unwanted trafic to a network
Firewall
The new way of atacking a company its not via hacking, rather its workers we call that...
Social Ingeniering
The weakest point of a perfect protected system is...
The user
An unattended computer logged into an administrator account
Add a time of inactivity lock
MFA stands for
MultiFactorAuthentification