Information Security

What is Information Security?

Cyber and information security is the protection of technology, software, and information from malicious attacks. Your personal information is constantly being threatened, whether you are aware of the threats or not. Malicious attacks occur in many forms, including computer hacking, malware, phishing and social engineering. It is important that you practice information security so that your information is not exposed, stolen, or harmed.

Why is Information Security Important?

Information security is foundational for individuals and organizations to function and prosper. When cybercriminals access confidential information, the consequences can be catastrophic. According to the Official Cybercrime Report by Cybersecurity Ventures, the global annual cost of cybercrime is predicted to reach $9.5 trillion USD in 2024.¹

Here are some additional statistics that emphasize the importance of information security:

• A study showed that computers with internet access are attacked on average 2,244 times a day or once every 39 seconds.²
• 88.5 million individuals are victims of cybercrimes each year.³
• 36% of American respondents said they have been victims of cybercrimes.⁴
• 43% of Gen Z and 36% of millennials have been victims of cybercrimes.⁵

How Do I Keep My Information Safe?

The best way to keep your information safe and avoid becoming a victim of cybercrime is to practice security awareness. This means to be aware of your surroundings, especially while online, and of your own security practices. Implement these practices to help keep your information secure:

1. Remember to lock your computer and personal devices at work and at home.
2. Create strong passwords.
3. Ensure that sensitive documents or information are kept secure and private.
4. Keep your devices and their software up to date.
5. If someone asks to use your computer, log out and have them use their own account.
6. Don’t share or write your logon credentials. Use a password manager where possible, to ensure credentials are unique and strong for each use.

Cyber-Attacks

Typically, cyber-attacks take place in multiple stages. First, the attacker gathers the information they need: from you or from your work. This collection stage, where the attacker gathers information, typically involves phishing, social engineering, or a combination of the two. This often occurs through social media. Then, they use that information to either attack you personally or to use your information to attack your friends, colleagues, or place of work.

By using security awareness practices, you can better protect yourself and your family from different forms of information and cyber-attacks.

Phishing

Phishing is a technique that attackers use to gather your information by posing as a legitimate institution or a friend. Phishing scams aim to trick individuals into clicking a link, opening an attachment, or disclosing sensitive information such as personally identifiable information, banking and credit details, or passwords. Attackers will use email, instant messaging, social media, and even phone calls to target individuals. Phishing can happen at work and in your personal life.

Social Engineering

Social engineering is when an attacker manipulates people into performing actions or sharing confidential information, often using personal information that they have managed to obtain. They often rely on human nature and a sense of urgency and will take advantage of your trust, kindness, and desire to help someone in need.

Additional Tips for your Information Security

1. Be careful with what information you share online
   
   • Be aware of what information you post or share online – do not share personal or confidential information. Check your privacy settings on social media platforms to manage who can see your information.
2. Enable Multi-Factor Authentication (MFA)
   
   • MFA adds an extra layer of security to your accounts and your information. Wherever possible, enable MFA on your accounts.
3. Educate yourself and remain cautious
   
   • Learn how to recognize and avoid cyber threats. Always be cautious of anything that seems suspicious or untrustworthy.

Protecting your personal data from theft and misuse is essential in today’s rapidly evolving world. Following these practices will help you keep your information secure. Remember that you are the most important part of your own information security.