Webinar – The Best Free One-Hour Security Awareness Training Ever - January 15th

If you want early The Best instructions on how to Free play the quizzes, go to One-Hour bit.ly/how-to-kahoot Cybersecurity Awareness Training Ever

Starting at 12PM Eastern

About us About Destiny

About Joshua

Cybersecurity is not your mission

Things you can do that make a big difference.

Nurture Educate ● Protect ● Verify ● ●

A security culture at your organization Yourself and others about risks Your accounts and devices with secure practices When in (ANY) doubt, VERIFY!

Hint: don’t do this

When in ANY doubt, VERIFY

Ways we get breached

Layers of Defense

Keep all your devices up-to-date with patches (and software updates)

Phishing

Bad Phish, Not Phish Sex Phish, Sly Phish

Bad Phish

Not W

alma

rt.co

m

Did I even place an order from Walmart?

Poor grammar

Not Phish

Where does the link go? https://www.netflix.com/password

Sex Phish A

e’l

r th e ov

is

r. e t la

lc

!W

ar e F

Urg

enc

y! W

e’ll

cov

er th

is la

ter.

lp ctua

ary!

u us

sc ed -

w

ass

yo ord

Sly Phish

Rea d ca

refu l

ly -

NO

T lin

ked

in.c

om

Wonder where this link goes? Me too!

https://jk3bt83s.r.eu-west-1.awstrack.me/L0/https:%2F%2Fwww.linkedn.co%2

To the bad guys, you are just a commodity

Who is out to get you?

Nation-State-Based Adversaries Panda = China Bear = Russia Kitten = Iran India = Tiger North Korea = Chollima

Non-Nation-State Adversaries Jackal = Activist groups Spider = Criminal groups Not listed - young men around the world

Giving away your personal information

What town were you born in?

What was the name of your first pet?

Where did you go to High School?

First street you lived on?

W M L

’ YOUR P ?

Phishing for Passwords

Social Engineering

Initiation

Authority

Fear

Urgency

Pretexting

About Passwords

123456 is THE BEST password LinkedIn breach (2012)

Ashley Madison breach (2015)

A long time ago in a galaxy far, far away...

Credential Stuffing

Monitor the dark web For your email address

Which one is the strongest password?

7!G2Kq@q Or xCuBZE$$%^s2 Or I like to eat donuts on Wednesdays.

7!G2Kq@q

xCuBZE$$%^s2

I like to eat donuts on Wednesdays.

Scores from: https://howsecureismypassword.net/

When it comes to passwords...

Sadly, even long pass phrases can be vulnerable ● ● ● ●

They can still get phished They can still be reused They can still be shared in insecure ways They can still be part of a breach

Too Many Passwords

Password Managers to the Rescue

Password Managers - Basics ● ● ● ● ●

Create long, complex and random passwords Inexpensive (generally <$30/year/person) Protect against phishing Audit your passwords Share passwords securely

Use a Password Manager

Multi-Factor Authentication (MFA) Also referred to as Two Factor Authentication or 2FA

Form of 2FA Most of us Use Already

Common Methods of 2FA Push

SMS

Authenticator app

Most Secure 2FA Universal Two-Factor (U2F)

Use Two-Factor Authentication (2FA)

Use it everywhere you can.

Start with your most important accounts.

Email first.

Risks with Public Wi-Fi

Defending against the Evil Twin

Man in the Middle (MITM)

Virtual Private Network or VPN

Avoid using public wi-fi (and take steps to protect yourself if you choose to use public wi-fi) ● Use your mobile hotspot instead ● Use a Virtual Private Network (VPN) ● If you have to use public wi-fi, VERIFY both the correct network and means of accessing the wi-fi you want to use.

Focus on the small things you can do that make a big difference.

Nurture Educate ● Protect ● Verify ● ●

A security culture at your organization Yourself and others about risks Your accounts and devices with secure practices When in (ANY) doubt, VERIFY!

Before you go, how would you like all of the following for free? ● ● ● ● ● ● ● ● ● ●

A Cybersecurity Health Checkup Check the Dark Web for compromised passwords with Stolen Password Scanning Build an Incident Response Plan Create a Technology and Data Use Policy Stay in the know about Recent Threat Alerts Educate your personnel with Security Training Videos Test your staff with Phishing Simulations Download Awareness Posters to print and post around the office Run a Website Scan to check for malware and blacklisting on your website Work with a dedicated RoundTable expert

Go to defendify.me, use the code “Defense” and get a free 30-day trial that includes everything you see above.

January 29th (2 weeks from today) High Noon 12:00-12:30 PM

Introducing Defendify by RoundTable