Phishing

Phishing is a form of social engineering. Phishing attacks use email or malicious websites to solicit personal information by posing as a trustworthy organization.

For example, an attacker may send email seemingly from a reputable credit card company or financial institution that requests account information, often suggesting that there is a problem.

When users respond with the requested information, attackers can use it to gain access to the accounts.

Ransomware

Ransomware is a type of malicious attack where attackers encrypt an organization’s data and demand payment to restore access.

In some instances, attackers may also steal an organization’s information and demand an additional payment in return for not disclosing the information to authorities, competitors, or the public.

Passwords

Passwords can be compromised for a number of reasons and it can put the organization at great risk; employees need to be educated so they can prevent this.

If passwords are written down, for example, they’re subject to theft or duplication.

If they’re shared with colleagues or managers over the phone, they could be lost to someone eavesdropping on the conversation.

Work from home & hybrid work

In the remote and hybrid work world, people work in a variety of environments. As a result, they need to understand a whole new dimension of risks they’re exposed to which can result in loss of passwords, theft of data, and more.

Employees that are advised correctly about the precautions they need to follow when working from an environment that isn’t their office are able to better protect themselves.

Physical IT Perimeter Security

Physical IT security involves controlling facilities housing system resources, the system resources themselves, and the facilities used to support their operations.

In the hybrid world, much of the responsibility lies in the hands of employees.