Pre­ven­tion is cru­cial

Increase employees’ awareness
Most cyberattacks begin with human error, such as clicking a fraudulent link or sharing login credentials.

• Educate employees about responsible use of IT systems

• Introduce the most common methods used by cybercriminals

• Foster a culture where mistakes are reported immediately

• Conduct simple and regular security exercises

Be prepared – a clear response plan
Without a defined response plan, valuable time is lost when an incident occurs and the damage can multiply.

• Define responsibilities and roles

• Regularly practice initial response procedures

• Define how and when information is communicated to employees and customers

Take regular backups
Many cyber threats aim to delete or lock data and disrupt operations.

• Set up automatic backups of data and key systems

• Regularly test recovery from backups

• Store backups in locations that attackers cannot access. Immutability ensures it can be verified that backups were taken and that they remain unchanged.

Use strong passwords
Strong passwords are one of the simplest and most effective ways to prevent unauthorized access to company systems and data.

• Use strong passwords that include letters, numbers, and symbols

• Avoid using the same password across multiple systems/accounts

Install and update security software
Security software helps detect and stop viruses, malware, and other cyber threats before they cause damage.

• Install antivirus and malware protection on all devices

• Ensure the software is updated regularly

Keep software and browsers up to date
Updates fix security vulnerabilities that cybercriminals can exploit to gain access to systems.

• Update browsers and operating systems when new versions are released

• Enable automatic updates whenever possible

Use firewalls and encryption
Proper network protection helps defend company systems against unauthorized access.

• Ensure that firewalls are active on networks

• Use encryption on wireless networks to protect sensitive information

Be cautious on public networks
Public networks can be easy targets for cybercriminals trying to access sensitive information.

• Avoid connecting to public Wi-Fi when working with sensitive information

• Use VPN services if it is necessary to connect to such networks

Securely erase data from old devices
Sensitive data may still remain on devices even if files have been deleted.

• Do not rely solely on “delete” when disposing of devices

• Use approved solutions to securely wipe data or destroy disks and other hardware that store data.