20 tips against social engineering

2016-10-22
-
Author:
DSwiss

Industrial spies want to obtain sensitive company data through social engineering attacks. The attackers confuse employees with false information to achieve their goals.

These 20 tips will help you protect yourself better:

  1. Regularly train employees and supervisors on the potential forms and risks of social engineering attacks.
  2. Find out about internal processes on the subject of security and data protection.
  3. Share only the most necessary data publicly on social media.
  4. Only accept friend requests on social media from people you really know.
  5. Never share personal passwords.
  6. Use strong and different passwords. Choose passwords with at least 12 digits.
  7. Do not enter passwords in the company of third parties. Alternatively, make sure you keep your distance.
  8. Use password managers if possible.
  9. Do not open any dubious mails.
  10. If you have nevertheless opened a suspicious mail: do not open any attachments or click on any links in the e-mail.
  11. Destroy documents that are no longer needed in the shredder.
  12. Include sensitive physical records.
  13. Lock the computer when you leave your workplace.
  14. Do not discuss business topics in public.
  15. Contact your supervisor before sharing sensitive information.
  16. Be critical of very pushy callers. If in doubt, end the call firmly and in a friendly manner.
  17. Approach unfamiliar visitors when they are unaccompanied on protected company property.
  18. Store digital data in encrypted form.
  19. Do not use unknown USB sticks on company computers.
  20. Encourage employees to protect their data.