Why Cyber Security is important to SME? Win-Pro Consultancy Pte Ltd Ronald Soh Useful Tips on how you protect and secure your business
What is Cyber Security? The process of protecting information by preventing, detecting, and responding to attacks. ~ NIST The preservation of confidentiality, integrity and availability of information in the Cyberspace. ~ ISO27032
Cyber Security Key Strategy Prevention Detection Respond to Recover Review
A social engineering technique used to fraudulently obtain personal sensitive data like user credentials, credit card information Asking you to a)Open an attachment b)Click on a link and redirecting you to malicious website c)Click on a link and requesting you to enter personal information Case Study#1 – Phishing
Is a malicious software using social engineering to lock access to a computer system or encrypt data until a sum of money is paid. Case Study#2 – Ransomware
1 2 3
1
14 Ways to Protect Your Company 1.Use Strong Password. Never share your passwords with others. Change password regularly. Use 2FA if possible. Enable login timeout after x number of unsuccessful attempts 2.Restrict strangers inside your office 3.Destroy all confidential paper with shredder. 4.Dispose IT equipment carefully. 5.Wipe data securely before disposal 6.Use Good Endpoint Security. Always check that your antivirus is running with the latest signatures 7.Perform Backup Regularly. Practice (3 backup copies on 2 different backup media with at least 1 copy in the cloud)
14 Ways to Protect Your Company 8.Treat with caution. Do not open attachments or click suspicious links 9.If noticed abnormal PC behavior, then investigate further 10.Use RDP over 2FA SSL VPN 11.Update Software and Firmware regularly 12.Have a proper Firewall to secure your network against external threats 13.Perform IT Security Audit Regularly 14.Always lock your workstation when you step away Windows Key + L lock your computer
Case Study#3 – Weak Wordpress Website
Weak Login Credentials Outdated Wordpress/Plugins/Themes Lack of HTTP over SSL (https) Lack of Regular Backup Lack of Security Hardening Policies
How to Check Wordpress Security? Case Study#3 – Weak Wordpress Website
How to Check Wordpress Security? Case Study#3 – Weak Wordpress Website
Alerts and Advisories Cyber Security Agency of Singapore National Cybersecurity and Communications Integration Center Microsoft: Security Focus: