The government actually provides a lot of good information and a lot of good tips on a wide range of cyber security topics. If I have, as was my goal, frightened you properly enough that you care for a more thorough education, I highly recommend spending some time on the United States Computer Emergency Readiness Team website:
Here are some of the most important things to keep in mind when it comes to the security of information:
- Never respond to requests for personal information or login information via email. Businesses will never ask for personal information in an email. IT departments and tech support will also never ask for that type of information via email.
- Do not enter personal information in a pop-up screen. Be very, very wary of all pop-up screens all the time.
- Do not click on any links listed in an e-mail message. Copy and paste the URL into your browser using the right click functionality.
- Always double-check the URL of your banking site, social networking site, e-mail site, etc. before you log in. Make sure that you are in the right place. Most browsers, including Firefox, Chrome, and Internet Explorer, now include a color-change on the left side of the location bar to indicate that the site has been verified as legitimate.
- Checking for HTTPS instead of the less-secure HTTP is always a good idea.
- Use anti-virus and anti-spyware software and update them regularly.
- If it looks fishy, it almost definitely is fishy, even if the source appears legitimate.
- If it seems too good to be true, it probably isn't true.
- Turn your computer off when you are not using it.
- Update your operating system regularly.
- It takes only a few seconds to secure your computer and help protect it from unauthorized access. Lock down your computer every time you leave your desk.
- Set up a screensaver that will lock your computer after a pre-set amount of time and require a password to log back in.
- If your computer is used by more than one person, create individual accounts with unique logins and passwords for each user.
- Choose a strong password. A good password should always include upper and lowercase letters, numbers, and at least one special character. Do not set the option that allows a computer to remember any password.
- Don't download anything from websites that you do not have complete confidence in.
- AGAIN, Protecting against insider threats is everyone's responsibility. If someone in the office is acting oddly, trying to get information about your system access credentials, EVER asks for your password, etc., REPORT THIS ACTIVITY to the CIO. Additionally, if you know that someone is extremely displeased with their job, or has been saying things regarding the company that seem at all threatening in nature, LET SOMEONE KNOW.