IT Security awareness Training

AGENDA IT Security – Why? Security Awareness Survey Social Engineering PHISHING RANSOMWARE Passwords Summary Q&A

It security - why? Protect Our Identity Data Integrity Raise Our Collective Awareness Protect Privacy Everyone’s Responsibility Together we can create a more secure working environment

IT Security Awareness Survey 115 Completed Survey (Thanks to those who completed it) This Security awareness training is a result of the information gathered from the survey Main Area Of Concern?

SOCIAL ENGINEERING

The hackers see us as a… Puppet on their string Techniques used by hackers include; Trickery Influencing Deception To exploit your weaknesses PHISHING ATTACK RANSOMWARE The hackers see us as a… Puppet on their string

PHISHING

Scam Link, Incorrect Domain Name, NO Https & NO Padlock Legitimate Link, Correct Domain Name, Https & The Padlock

www.facebook.com www.facebook.com www.facebook.com

ransomware The Day The NHS Stopped

Only 42% of ransomware victims Malicious Code Created Users Targeted Through Emails & Attachments Encrypts Your Files Bitcoin Payments Requested To Decrypt Files Bitcoin Payment Made Not Guaranteed Only 42% of ransomware victims recovered their data

Ransomware Infection Methods Visiting unsafe, suspicious, or fake websites. Emails & Email attachments Malicious Links on Facebook, Twitter, etc

AND FINALLY…

passwords Never share your passwords with anyone Change password immediately if you discover someone's aware of your account details Change your password frequently Never write your password down Avoid using known facts e.g. Date of birth, Pets names, Children's names Never use the same password for your work and personal accounts Try using Passphrases, easy to remember. Password memory test – Research…

Mydoghasbigbricks F0rtun4t3! Length: 17 Strength: Strong - This password is typically good enough to safely guard sensitive information like financial records. Entropy: 81.1 bits Mydoghasbigbricks F0rtun4t3! Length: 10 Strength: Reasonable - This password is fairly secure cryptographically and skilled hackers may need some good computing power to crack it. (Depends greatly on implementation!) Entropy: 44.9 bits

Password Housekeeping To summarise IT Security – Why? Is everyone's responsibility. Raise a collective awareness. Be safe online. Use common sense. Phishing Check sender address, Suspicious links, hover over links/buttons to check URL Ransomware Check sender address, Suspicious links, hover over links/buttons to check URL. Only open attachments that you’re expecting. Password Housekeeping Never give your password out. Use different passwords. Consider using passphrases for your password.

If in doubt contact IT Services Call EXT: 300 Email – Service.desk@LSEC.ac.uk

Q&a

DO YOU WANT TO WIN £20?