Cybersecurity: Securing Your Company and Client Information

CybersecuritySecuring Your Company and Client Information

Why Do we Need Cybersecurity?Identifying the Need forSecurity

Recognize Social Engineering

2

Why Do We Need Cybersecurity?

3

Any act that influences a person to take an action that may or may not be in their best interest.

What is Social Engineering?

4

Types of Social EngineeringAttacks

Phishing

Whaling

Spear Phishing

Vishing

Impersonation

Tailgating

Cybersecurity Agenda

Cyber Security Overview

Cybersecurity AgendaBest Practices

Establish a Cybersecurity Strategy

Before an Intrusion Occurs

Responding to a Computer Intrusion (Executing Your Incident Response Plan)

What Not to Do

After a Computer Incident

Establish a Cybersecurity StrategyHow is your data being handled?Data is most at risk when on the move

Identify the types of data you have in your businessPersonally Identifiable Information (PII)Employee InformationBusiness InformationWho has access to data and why?Data inventoryAssign data access rightsDevelop a Privacy Policy

8

Before an Intrusion OccursHave an Action PlanWho has lead responsibility?Critical contact informationCritical data / network / servicesEDUCATE / TEST / DOCUMENT

Have appropriate technology in placeInternal networkCloud-based services

Responding to a Computer IntrusionMake an Initial AssessmentAffected computer systemsApparent originMalware or any remote servers involvedIdentify other victim organization

Minimize Continuing DamageCollect and Record InformationNotifyPeople within the organizationOther potential victimsLaw enforcement

What Not To DoDo Not Use the Compromised System

Do Not Hack Into or Damage Another System

After a Computer IncidentContinue to MonitorConduct Post-Incident Review

Security Program Maturity

13

Let Omni run a security risk assessment for your company.Call us today for a consultation: 800.300.5543

Visit us online: omniperforms.com

14