Cybersecurity Awareness for employees.pptx

Cyber security

1. Cyber security awareness Overview and various types

2. Cost of Cyber security attacks. Phishing and Business Email compromise Importance of Cyber security AGENDA Ransomware PAGE TITLE How Can I protect myself ?

3. Importance of Cyber Security https://www.varonis.com/blog/data-breach-statistics/

4. Phishing attacks are still number 1 Social Engineering is the leading attack vector for scams Ransomware attacks are on the rise Current global state of Cyber security

5. Phishing Phishing refers to the practice of creating fake emails or SMS that appear to come from someone you trust, such as: Bank, Credit Card Company, Popular Websites The email/SMS will ask you to “confirm your account details or your vendor’s account details”, and then direct you to a website that looks just like the real website, but whose sole purpose is for steal information. Of course, if you enter your information, a cybercriminal could use it to steal your identity and possibly make fraudulent purchases with your money.

6. Example of Phishing

7. Example of Phishing

8. Ransomware Email attachments Website downloads Email links Website links This is type of virus/malware that encrypts data specifically asking for payment to restore the access. How it spreads? Regular backups Updates Verify emails How to Protect ? Don’t PAY!

9. Business email compromised (BEC) BEC is a big problem for you and your organization: Your email is compromised, or another employee’s email of your organization is compromised Almost always, these emails fall into 2 categories: Downloading and spreading additional malware automatically.2 Urging the customer to perform a financial transaction immediately. Steps to control BEC. Standard phishing email awareness – don’t click links or download attachments. Pay attention to the email address. Enable MFA ( Multi factor Authentication) for business email accounts.

10. Business email compromised (BEC)

11. Business email compromised (BEC)

12. Personal Losses due to cyber crime Potential losses to cyber crime by individuals in the US in 2022 totaled more than $10.2 billion . This is significantly higher than in 2021 when individuals lost an estimated $6.9 billion. Considering there were 5% fewer complaints in the US in 2022 compared to 2021, this suggests that cyber crime cost more per victim than the previous year. eCommerce fraud is expected to cost the retail sector $48 billion globally in 2023. Online payment fraud is predicted to cost businesses $343 billion between 2023-2027. The UK had the highest number of cyber crime victims per million internet users at 4783 in 2022 – up 40% over 2020 figures.

13. Personal Losses due to cyber crime

14. Everything is CONNECTED! Workplace documents Personal documents Identity Finances Why is Cyber security awareness important?

15. How can I protect myself?

16. Use Long and strong passwords Enable 2FA ( 2 Factor Authentication) where possible. E.g. One time password is text messaged to authenticated mobile or voice call is made. Change default passwords. Don’t reuse passwords across accounts. Passwords

17. Keep device updated

18. Phishing - email Vishing – phone call Smishing – text messages Look out for: Urgency Asking for personal/financial information Unsolicited Contain links and downloadable files Bad grammar Too good to be true Be aware of Scams

19. Protect your digital footprint Privacy controls Ensure you have read your company privacy policy and follow it. Be mindful of what you share Ensure personal data of your customer/suppliers/employees is safe with receiver when you share them. Review app privacy collection Ensure you have read what data the app is collecting, and it is meeting the compliance

20. Create your own cyber security checklist Are my devices secure? Beware of using FREE Wi-Fi Do I have an anti-virus installed? Am I backing up my important files? On Cloud & Local Are my devices up to date? Enable two-factor authentication (2FA) wherever possible. STOP. THINK BEFORE YOU CLICK.

21. Steps taken by Illumin8 IT Implementation of 2 Factor authentication for Emails. Data leakage protection tools Windows patch update management Microsoft defender for enhanced email security Implement Personal data protection policy and GDPR compliance across all locations.

22. Setting of 2 Factor Authentication Activate MFA directly from outlook(Once MFA updated is updated as mandatory by company administrator) Please follow the below steps in outlook Close Reopen outlook While open outlook need to enter email id & password You will see the screen as shown

23. Setting of 2 Factor Authentication

24. Setting of 2 Factor Authentication

25. Illumin8: Anti phishing and Malware detection

26. Illumin8: Anti phishing and Malware detection

27. Illumin8: System update & protection System

28. How can you help ? Report suspicious emails : [email protected] Got a question? Send Request to [email protected] Sign up for free cyber alerts https://www.earlywarning.service.ncsc.gov.uk/ Interactive learning : From National Cyber Security Center UK https://www.ncsc.gov.uk/training/cyberfirst/packages/en/index.html