Security Awareness Training: Protecting Data, Devices & More

Strengthen security by creating long, unique passwords with mixed case, numbers, and symbols, avoiding reuse; use passphrases and a password manager, enable multi-factor authentication, and check breaches.

Strengthen account security with multi-factor authentication by combining two or more factors—something you know, something you have, and something you are—and prevent breaches across email, cloud, and financial platforms.

Recognize phishing as deception that targets users via emails, texts, and social messages to steal credentials. Pause before clicking; inspect sender domains and verify through a second channel.

Learn to recognize social engineering tactics such as phishing, pretexting, tailgating, and quid pro quo, and practice verification and skepticism to protect data, devices, and networks.

Learn to spot real-life phishing by recognizing urgency, impersonation, and look-alike domains; pause, verify senders, hover links, and log in only through trusted channels to protect credentials.

Spot suspicious activity early by recognizing digital cues like pop ups and unusual login attempts, then report quickly through internal channels with what happened, where, when, who, and any evidence.

Protect data across laptops, mobiles, and desktops with full disk encryption like BitLocker or FileVault and MFA, and lock devices when unattended. Enable auto lock and remote wipe.

Learn USB risks and safe use of external devices: use company approved drives, enable automatic malware scanning, encryption, and device controls.

Enable auto updates and perform weekly checks to patch devices, browsers, and plugins. Use patch management, asset inventory, and update compliance dashboards to close vulnerabilities and bolster endpoint security.

Strengthen remote work security by enabling full disk encryption, updating software, and using antivirus and firewall, while practicing mobile security with strong locks, app permissions, USB ports, and phishing awareness.

Protect data on public wifi with a VPN that encrypts your connection and guards data in transit, even on fake networks. Use HTTPS Everywhere and disable file sharing when off-network.

Adopt clean desk and screen lock policies to prevent data exposure. Lock your screen when leaving, secure confidential documents, and enable automatic lock to protect devices in any work setting.

Identify sensitive data beyond passwords, recognizing that emails, contracts, or chat messages can become risks when seen in context. Learn legal, trust, and cybercrime implications of misusing such data.

Encrypt data at rest and in transit, with end-to-end protection when possible, then share via secure platforms with expiration and limited downloads; store in approved locations and routinely audit files.

Learn how everyday actions cause data leaks, from misaddressed emails to exposing sensitive data in shared files. Verify recipients, clean documents, and control access with view-only links to prevent disclosures.

Increase awareness to prevent tailgating, a common unauthorized access risk tied to human habits. Don't hold doors, insist on badge-in, and report suspicious activity to security.

Recognize insider threats, including malicious, negligent, and compromised insiders, and report early warning signs like unusual access, bypassed security protocols, or odd after-hours activity.

Spot early signs of a breach, from strange pop ups to unusual login alerts, then disconnect the device, stop using affected systems, do not delete data, and report immediately.