Passwords protect your account, create strong ones and never replicate them for multiple account use. Consider 2-factor authentication (2FA), this requires an extra step of security, which could be physical (a phone) or biological (a fingerprint).
Accessing an account is all the more harder for the cyber-criminal if using 2FA.
You can find out more about 2-factor authentication in our quick read blog here.
Be wary of links and attachments in emails, especially from unknown senders. Phishing emails have become the most common form of scam and are increasingly convincing that they’re from a genuine source.
Report any emails that may appear suspicious and do not respond or give any information until you’ve confirmed its legitimacy.
Click on the image to enlarge the 9-step email check.
Lock your laptop when you are not using it, and avoid sharing your work devices for ‘family-use’. If using your phone for work or have a work phone ensure the device is locked when not in use.
Be wary of eavesdropping or ‘shoulder surfing’ if working in a public area. Someone sat behind you could see everything on your screen. Avoid using public Wi-Fi, use a personal hotspot. And be mindful of the risk of device theft when working remotely.
Do not use your home router’s default credentials, change them.
Use an internet connection that is separate from personal devices and keep your VPN (virtual private network) on.
The VPN protects data you send & receive, and provides a secure link between you and your company by encrypting data and scanning devices for malicious software.
Only used company-approved software and hardware and do not use un-authorised USB devices.
Follow company policies and procedures for working from home and ensure your IT department are installing any updates, running the necessary antivirus scans and implementing cyber security procedures.
The NCSC offer sound advice for device use and for working from home.
To find out how we can help test vulnerabilities from employees working from home or remotely,
check out our Testing Services.