Top 10 Things Only You Can Do To Prevent Cyber Attacks

You Are The Last Line of Defense For Preventing Cyber Attacks

A strong cybersecurity plan for your business should include tools, both software and hardware, to protect against attacks. However, cybersecurity goes far beyond just installing software and setting up firewalls. While these tools are vital in safeguarding your business, they can’t do everything.

Cybercriminals are always looking for the easiest way in, and human error is often the weakest link in any cybersecurity plan.

Not too long ago, we posted “15 Ways to Protect Your Business From a Cyber Attack,” highlighting essential measures every business should implement for a well-rounded and robust cybersecurity strategy. A few items on that list require a committed human element to make the plan fully effective.

In this article, I’ll share what I consider to be the top 10 actions only you and your team can take to prevent cyber attacks. These steps are simple but powerful ways to strengthen your role as the last line of defense.

At the end of this article, I’ve included an infographic of this top 10 list, so be sure to read through to the end and print it out to share with your employees.

Let’s dive into the list, David Letterman style, by counting down from #10.

#10 – Beware of Thumb Drives!

A thumb drive, also known as a USB drive, or any other external storage device, can be a hidden risk if you’re unaware of its origin. Don’t ever plug an unknown thumb drive into your computer or laptop. The unknown thumb drive could contain malware that auto-runs when connected, giving hackers direct access to your system. Hackers sometimes intentionally leave infected drives in public places, hoping someone will pick them up and use them. To protect yourself, only use thumb drives from trusted sources, and don’t connect unknown devices to your computer. If you are unsure of the origins of a thumb drive and really want to use it, give it to your IT department to test it for you.

#9 – Beware of Public Wi-Fi!

Public Wi-Fi networks, such as those in coffee shops, airports, and hotels, are notoriously insecure and prime targets for cybercriminals. Hackers can easily intercept data transmitted over public networks, capturing your login credentials, emails, and other sensitive information. If you must use public Wi-Fi, don’t log in to sensitive accounts like your email or your bank, and consider using a Virtual Private Network (VPN) to encrypt your connection. Staying cautious on public Wi-Fi can prevent unauthorized access to your personal and business data.

#8 – Beware of Phishing Emails!

Phishing emails are one of the most common methods hackers use to steal personal information. These emails often appear legitimate, mimicking well-known companies or colleagues to trick you into revealing sensitive information or clicking malicious links. Always scrutinize emails that ask for personal or financial information and verify the sender’s address. If in doubt, contact the person or organization directly. Being vigilant about phishing emails helps you avoid falling victim to this common but dangerous cyber threat.

For specific examples of phishing emails, check out this previous AZCOMP article called How to Spot a Phishing Email.

#7 – Beware of Emailed Links and Attachments!

Links and attachments in emails can contain hidden malware or redirect you to malicious websites. Even if an email looks familiar, verifying the sender before clicking on links or downloading attachments. Many phishing attacks rely on curiosity or urgency to make you click without thinking. Hover over links to check the URL; if something seems suspicious, don’t click. Dangerous email attachments used to be limited to certain types of files, but now, malware can be hidden in basically any type of attachment like Excel spreadsheets, word documents, PDF documents, and more. Taking a moment to verify can prevent a potentially costly cyber attack.

#6 – Browse the Internet Safely!

Unsafe browsing habits can expose you to malware and malicious websites designed to steal information. Avoid visiting unsecured or suspicious websites. Avoid clicking on ads or pop-ups. Use a reputable web browser with built-in security features, and consider using ad blockers to reduce exposure to malicious ads. Safe browsing habits is an easy way to avoid a wide range of cyber threats.

#5 – Use Multi-Factor Authentication!

Multi-factor authentication, or MFA, adds an extra layer of security by requiring additional verification beyond just a password. Even if a hacker obtains your password, they’ll still need the second factor, like a code sent to your phone, to gain access. Especially on sensitive accounts like your banking website, your email, and others, enable MFA to reduce the risk of unauthorized access drastically. MFA is one of the most effective defenses you can use to protect sensitive data.

#4 – Don’t Write Your Passwords Down!

Writing passwords down, especially in accessible places like sticky notes on your desk, makes them vulnerable to being discovered by others. Don’t write everything down on a spreadsheet on your computer, either. Instead, consider using a secure password manager to safely store and generate complex passwords. This way, you don’t have to remember multiple passwords and your information is stored securely, reducing the risk of physical and digital password theft.

#3 – Don’t Use the Same Passwords Across Multiple Accounts!

Reusing passwords across multiple accounts means that if one account is compromised, all accounts using the same password are at risk. Cybercriminals often use credential stuffing—which tests your login information on multiple sites—to gain access to more of your accounts. Use unique passwords for each account to limit your risk and enhance overall security. For a little extra clarity on the subject, in my opinion, it’s ok to use the same password for Candy Crush and your McDonald’s rewards app, but definitely not for your bank, your email, your computer login, or any other login containing sensitive information.

#2 – Use Strong Passwords or Passphrases!

A strong password is your first line of defense against unauthorized access. Weak passwords are easy for hackers to guess or crack using automated tools. Use a combination of uppercase and lowercase letters, numbers, and special characters… and make it long, too, like 16 characters or more. Or opt for a long passphrase, which is a series of random words that’s both secure and memorable. The stronger your password, the harder it is for attackers to breach your accounts.

And, Finally, The #1 Thing Only You Can Do To Prevent Cyber Attacks

– Assume You Are A Target! One of the most critical mindsets to adopt is to assume that you are a potential target for cyber attacks. Many people think they’re too small or insignificant to be noticed by hackers, but cybercriminals often target smaller businesses precisely because they’re seen as easier targets. Stay proactive, remain vigilant, and treat every suspicious email, link, or message with caution. By assuming you’re a target, you’ll stay alert and protect your business from the ever-present threat of cyber attacks.

Download & Print This Infographic of The Top 10 Things Only You Can Do to Prevent Cyber Attacks

To help your employees know their role in preventing cyber attacks, we recommend you print out this infographic and hang it in your workplace lunchroom or give it to each employee to keep at their desk. Either way, don’t hide this information! Instead, distribute it to your employees so everyone knows what they can do to prevent a cyber attack in your business.

AZCOMP Can Help

Sometimes, all this information can be overwhelming, and it’s hard to know where to start. So, if you have questions, want to talk any of this through, or need someone to help you get any of this done, just call AZCOMP Technologies! We’ve been helping businesses improve their cyber security defenses and train employees how to act appropriately around the internet since 2000. We can help you too! Give us a call or request a network assessment on our website.