3 ways to stay cyber-secure
Over the past year, 46% of Americans and 93% of organizations have experienced password theft and identity-related breaches, respectively. This ongoing escalation of cybersecurity threats underscores the need for strong personal and professional security practices — and the perfect time to cultivate these cyber-safe habits has arrived.
Every October, National Cybersecurity Awareness Month encourages individuals and organizations to review, refresh and bolster their online security measures. As cyber threats evolve alongside advancements in technology and artificial intelligence, proactively guarding personal and professional data has become more important than ever.
“In our increasingly interconnected world, we’re exposed to a wide range of cyber threats, including sophisticated phishing scams, deep fakes, data breaches, and stolen identities,” shared Kimberly Clark, deputy chief information officer at Arizona State University (ASU). “The importance of cybersecurity has never been more critical. Everyone is susceptible to these risks, especially our older population who may be less familiar with online security.”
Below are three key strategies to help you secure your sensitive information and spot attempts at compromising your data.
1. Don’t pass on password protection
The first step toward staying secure is to create unique, difficult-to-guess passwords. The length of your password is the primary determinant of its strength — a password of at least 14 characters is recommended.
One way to formulate a strong password is to string together a set of unrelated words, for example, "Card-table-stripe-brown." These passwords tend to be much longer and more difficult to hack or guess than simpler, more common passwords, such as your birthdate or the name of your pet.
Another memorable strategy is to abbreviate a sentence with personal meaning and then add numbers or special characters. For instance, the phrase “Painting In The Morning At The Park” can be shortened to "PITMATP," which is then made more secure by adding numbers and punctuation, such as "PITMATP!1982."
For those concerned about keeping track of lengthy, robust passwords, password management tools have you covered. Tools like Stache, which comes recommended by ASU Enterprise Technology, generate complex passwords on your behalf and store them securely, omitting the need to commit each password to memory.
2. Be on the lookout for phishing scams
One of the most common cybersecurity threats is phishing, a tactic in which bad actors attempt to retrieve sensitive information from their targets by pretending to be a friend, family member or reputable institution. These bad actors typically use this sensitive information to commit financial fraud but may also commit other cybercrimes, from introducing malware into a target’s device to identity theft.
These attacks often occur through fake emails, text messages, websites or even phone calls.
Protecting against phishing attempts requires vigilance and caution. When answering emails, look closely at the sender's email address for misspellings or inconsistencies and avoid clicking on links from unfamiliar senders. If you receive a suspicious-looking message in your ASU inbox, you can forward it to infosec@asu.edu for review.
Two types of phishing that are on the rise are vishing (phone calls or voice messages) and smishing (cyber attacks via text message). Stay vigilant, and remember never to give your passwords, authentication codes or private information to those emailing, texting or calling you. It’s also a good idea never to click on links that you aren’t familiar with.
3. Stay informed with regular cybersecurity training
It’s everyone’s responsibility to help their organization stay cyber-safe.
In order to provide ongoing support, ASU provides information security training to all faculty and staff each year. This 40-minute training helps participants understand how to protect ASU data and information systems from harm. With the rise of cyberattacks targeting higher educational institutions, it is vital to cultivate a workforce well-versed in these topics.
In addition to annual training, we host a variety of events to keep the community informed. Upcoming events include an ASU expert panel at Memorial Union on Tuesday, Oct. 8 (register here) and a virtual panel discussion with cybersecurity leaders from across the nation on Oct. 28 (register here).
Cybersecurity is a collective responsibility
“Cybersecurity is everyone’s responsibility,” Clark continued. “And it's not only about technology – it’s about being informed, staying vigilant, and working together. So this month, let's commit to taking proactive steps to safeguard our digital lives.”
For National Cybersecurity Awareness Month, Enterprise Technology encourages all Sun Devils to take the above steps to proactively secure their data and further expand their knowledge by participating in the many cybersecurity events planned throughout October. We look forward to a month of learning and fostering a cyber-safe campus with you.