Cybersecurity For Dummies®, AwareGO Special Edition

1 These materials are 2020 John Wiley & Sons, Ltd. Any dissemination, distribution, or unauthorized use is strictly Special Editionby Maria Bada, PhD, and Ragnar Sigurdsson, CISSPT hese materials are 2020 John Wiley & Sons, Ltd. Any dissemination, distribution, or unauthorized use is strictly For Dummies , AwareGO Special EditionPublished by: John Wiley & Sons, Ltd., The Atrium, Southern Gate Chichester, West Sussex, 2020 by John Wiley & Sons, Ltd., Chichester, West SussexRegistered OfficeJohn Wiley & Sons, Ltd., The Atrium, Southern Gate, Chichester, West Sussex, PO19 8SQ, United KingdomAll rights reserved No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted by the UK Copyright, Designs and Patents Act 1988, without the prior written permission of the Publisher.

2 For information about how to apply for permission to reuse the copyright material in this book, please see our website : Wiley, For Dummies, the Dummies Man logo, The Dummies Way, , Making Everything Easier, and related trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates in the United States and other countries, and may not be used without written permission. AwareGO and the AwareGO logo are trademarks of AwareGO ehf. All other trademarks are the property of their respective owners. John Wiley & Sons, Ltd., is not associated with any product or vendor mentioned in this OF LIABILITY/DISCLAIMER OF WARRANTY: WHILE THE PUBLISHER AND AUTHOR HAVE USED THEIR BEST EFFORTS IN PREPARING THIS BOOK, THEY MAKE NO REPRESENTATIONS OR WARRANTIES WITH RESPECT TO THE ACCURACY OR COMPLETENESS OF THE CONTENTS OF THIS BOOK AND SPECIFICALLY DISCLAIM ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

3 IT IS SOLD ON THE UNDERSTANDING THAT THE PUBLISHER IS NOT ENGAGED IN RENDERING PROFESSIONAL SERVICES AND NEITHER THE PUBLISHER NOR THE AUTHOR SHALL BE LIABLE FOR DAMAGES ARISING HEREFROM. IF PROFESSIONAL ADVICE OR OTHER EXPERT ASSISTANCE IS REQUIRED, THE SERVICES OF A COMPETENT PROFESSIONAL SHOULD BE general information on our other products and services, or how to create a custom For Dummies book for your business or organization, please contact or visit For information about licensing the For Dummies brand for products or services, contact 978-1-119-72149-9 (pbk); ISBN 978-1-119-72231-1 (ebk)Printed in Great Britain10 9 8 7 6 5 4 3 2 1 Publisher s AcknowledgmentsDevelopment Editor: Faithe WempenProject Editor: Martin V. MinnerAcquisitions Editor: Ashley CoffeyEditorial Manager: Rev MengleBusiness Development Representative: Karen HattanProduction Editor: Siddique ShaikTable of Contents iiiThese materials are 2020 John Wiley & Sons, Ltd.

4 Any dissemination, distribution, or unauthorized use is strictly of ContentsINTRODUCTION ..1 About This Book ..1 Icons Used in This Book ..2 Where to Go from Here ..2 CHAPTER 1: Introducing Cybersecurity ..3 Defining Cybersecurity ..3 Uncovering the CIA Triad ..4 Confidentiality ..4 Integrity ..5 Availability ..5 Understanding Online Social Behavior ..5 Staying Safe Online ..6 Making sure your Internet connection is secure ..7 Being careful what you download ..7 Choosing strong passwords ..7 Making online purchases from secure sites ..8 Being careful when meeting someone online ..8 Keeping your operating system updated ..8 Protecting your wireless network ..8 Using a firewall ..9 Being a selective sharer ..9 Securing your mobile 2: Understanding SME Vulnerabilities and Threats ..11 People: The Weakest VAPs ..12 Educating Your Employees About Security ..13 Exploring Technology Vulnerabilities ..14 Decreasing Attack Vulnerability.

5 15 Patches ..15 Secure configuration ..15 Firewalls ..17 Access protection ..18 Dealing with the Aftermath of a Breach ..19iv Cybersecurity For Dummies, AwareGO Special EditionThese materials are 2020 John Wiley & Sons, Ltd. Any dissemination, distribution, or unauthorized use is strictly 3: Defending Against Social Engineering ..21 Understanding Social Engineering ..21 Comparing Social Engineering Approaches ..23 Phishing ..24 Spear-Phishing ..24 Vishing ..25 Smishing ..25 Whaling ..26 Avoiding Phishing Attacks ..26 CHAPTER 4: Working Remotely ..27 Recognizing the Risks of Working Remotely ..28 Unsecure networks ..28 Personal and shared devices ..28 Insecure mobile devices ..29 Virtual meetings ..29 Addressing Remote Security Challenges ..29 Have a risk management policy ..29 Have a remote security policy ..30 Offer the right tools ..30 Keep devices patched and good basic digital hygiene ..31 Give clear security guidance.

6 31 Use cloud software solutions for file management ..31 Take extra precautions during virtual meetings ..32 Training and best practices ..32 CHAPTER 5: Developing an Information Security Awareness Strategy ..33 Developing an Information Security Strategy ..34 Implementing the Strategy ..34 Measuring Information Campaign Effectiveness ..35 Developing a Cybersecurity Culture ..36 Promoting Information Security Awareness to the C-Suite ..37 Table of Contents vThese materials are 2020 John Wiley & Sons, Ltd. Any dissemination, distribution, or unauthorized use is strictly 6: Ten Ways to Stay Cybersecure ..39 Protecting Networks from Attacks ..39 Conducting Staff Awareness Training ..39 Encrypting Sensitive Data and Emails ..40 Using Security Utilities ..40 Using Strong Passwords and Password Managers ..41 Being Careful with Unprotected Wireless Networks ..41 Keeping Up with Updates ..42 Establishing Procedures for Home and Mobile Work.

7 42 Monitoring Compliance ..42 Introduction 1 These materials are 2020 John Wiley & Sons, Ltd. Any dissemination, distribution, or unauthorized use is strictly the dawn of the Internet, unscrupulous people have been using it to commit crimes. Despite technical advances when it comes to virus protection, unbreachable firewalls, and other guarding methods, cybercriminals are still getting through. How? We simply let them in the front error is the most common reason attacks happen. Humans are often unaware of the risks online. They can t see why clicking a link or opening an attachment might be dangerous. Virus pro-tection and firewalls are necessary, but they do little good if we humans keep making like firewalls, humans can be programmed to do better. When we educate people about the most common risks and pitfalls of Cybersecurity and teach them how to avoid these dangers, they are less likely to make mistakes.

8 They will do better because they know is not just about buying expensive anti-virus soft-ware it s about the training and programming of humans in an attempt to change human behavior. Employees who are well trained regarding Cybersecurity will save companies money in the long run, through reduced downtime and direct cost avoidance. More importantly, Cybersecurity helps safeguard the company s valuable data and minimizes the risk of regulatory and medium enterprises (SMEs) in particular need to take Cybersecurity seriously because not every SME can bounce back after being hacked. Cybercriminals often target SMEs because they are perceived as easy marks due to lack of formal security policies and low security This BookCybersecurity for Dummies, AwareGO Special Edition , is a crash course in Cybersecurity and how to implement it in a company.

9 This book touches on all the major aspects of Cybersecurity and data protection, and helps readers better understand human behavior Cybersecurity For Dummies, AwareGO Special EditionThese materials are 2020 John Wiley & Sons, Ltd. Any dissemination, distribution, or unauthorized use is strictly book gives you a basic understanding of both the technical aspects of Cybersecurity and the human factor. It explains how Cybersecurity awareness training is the best way to minimize cyber risks due to human error and why companies should invest in their employees training. The book identifies the most com-mon methods hackers use to get into systems and what tools administrators can use and offer their employees to minimize the risk of that Used in This BookTo make it easy to navigate to the most useful information, these icons highlight key text:Take careful note of these key takeaway the target for tips that can save you time and out for these potential pitfalls on the road to Go from HereThe book is written as a reference guide, so you can read it from cover to cover or jump straight to the topics you are most interested in.

10 Whichever way you choose, you can t go wrong. Both paths lead to the same outcome a better understanding of cyber security and better strategies for protecting your 1 Introducing Cybersecurity 3 These materials are 2020 John Wiley & Sons, Ltd. Any dissemination, distribution, or unauthorized use is strictly 1IN THIS CHAPTER Describing basic Cybersecurity concepts Understanding behavior online Describing what it means to be safe onlineIntroducing CybersecuritySmartphones, computers, and the Internet have become fun-damental parts of modern life, and with them have come security and privacy threats. From online banking and shop-ping to email and social media, it is more important than ever for consumers to take steps to protect their identities and chapter introduces basic concepts related to Cybersecurity . It shows you how your online behavior affects your privacy and security, as well as what you can do to be CybersecurityThe prefix cyber refers to computers and information technology.