The 2023 Information Security Essentials in Business World

Identify internet threats and phishing activity, and apply best practices for safe internet browsing as you explore module two of the 2023 information security essentials in business world course.

identify internet threats such as downloading from a known source, phishing-like risks, and spyware or malware that threaten personal and financial information.

Explore common malware types, including viruses, trojans, spyware, ransomware, remote control, rootkits, keyloggers, botnets, zombies, and Bitcoin miners, and how they threaten business networks.

Ransomware is sophisticated malware that blocks access to files and demands payment to regain access; infections spread via compromised websites, spam emails, and other malware, risking files encrypted forever.

Explore how denial of service attacks block access to networks and how phishing exploits prompt disclosure of personal data. Learn protection steps like verifying senders, inspecting links, and checking certificates.

Learn best practices to fight cyber threats, including phishing prevention, two-factor authentication, and regular account monitoring, plus ransomware defense through backups, antivirus, and safe browsing.

Secure mobile devices by enforcing BYOD policies, biometric authentication, encryption, and regular software updates. Protect data by enforcing strong passwords, enabling wipe on loss or theft, and avoiding public wifi.

Create a BYOD policy and over-the-air deployment plan that securely separates personal and corporate data, manages data usage, protects privacy, and monitors compliance.

Explore cloud security best practices, governance, and controls to protect data, applications, and infrastructure in cloud environments, and enforce clear desk and clear screen policies plus passwords and multi-factor authentication.

Recognize that cybersecurity can be breached via the internet despite security measures. Identify phishing and malware as key internet threats and commit to ethical browsing practices.

Learn to identify email security threats and combat phishing by analyzing suspicious messages, checking domains, avoiding personal data requests, and consulting IT for validation to protect your organization.

Identify email threats such as spam, phishing, and rootkit attacks. Delete unsolicited emails, never open attachments, or click links, never respond to spam, and spring clean your mailbox.

Protect email access by never sharing or writing down passwords or login ids, change them immediately if compromised, and use a seven-character password with mixed case, numbers, and symbols.

Discover how to spot malicious attachments and links in emails and apply best practices for email security and password protection to safeguard your information.

Explore how social engineering exploits trust through impersonation and wire transfer fraud. Learn best practices to prevent these scams in business settings.

Learn how physical and systems security protect assets and deter social engineering through access control, data centers, and handling confidential information, while securing workstations and managing passwords and IP addresses.

Learn how social engineering manipulates people to reveal credentials and enable unauthorized access, fraud, and identity theft through techniques like unsolicited calls, phishing, physical impersonation, baiting, and dumpster diving.

Raise awareness about social engineering and prevent it by never assuming identities, never disclose confidential information, verify callers with a supervisor or compliance officer, and stay cautious with unsolicited requests.

Learn how social engineering threatens information security. Explore attack types including unsolicited calls, emails and SMS, instant messaging, physical impersonation, phishing baiting, dumpster diving, and adopt practices to prevent disclosure.

Protect your computer by applying best practices such as updating antivirus software, using strong passwords, practicing safe email and browsing, and securing devices with screen locks.

The IT division enforces security policies across the organization, including password expiry every 30 or 90 days, patch management, antivirus updates, firewall protection, data loss prevention, and web filtering.

Identify how security threats can destroy information and invade privacy, and how organizations implement security measures to minimize malware risk and prevent data loss.