Cybersecurity expert Andrew Fordred, director of security and intelligence operations firm Intelligence i1, recently spoke at the Namibia Scientific Society about the importance of making cybersecurity accessible to small-business owners and ordinary Namibians. He emphasized that everyone should know how to protect themselves against cybercrime, as it is becoming increasingly easy for attackers to carry out. Fordred's series of talks aims to educate people on how to safeguard their online presence.
According to Fordred, the human factor is often the key weakness in a cyberattack. He advises that all communication requesting money, credentials, or urgent action should be treated as high-risk. This is particularly important for small and medium-sized businesses, which may not prioritize cybersecurity but can be brought to a grinding halt by a cyberattack. Individuals, too, can lose money through banking scams and often struggle to recover lost funds.
Financial and operational impacts can be severe for businesses and individuals alike. Fordred explains that attackers typically want one or more of four things: money, access, credentials, or data. Ultimately, their goal is often to obtain money, and they may use social engineering tactics to achieve this. For example, unusual banking communication or instructions for payment should be verified through a secondary channel to prevent scams.
Experts recommend verifying communication through alternative channels, such as phone or in-person verification, to ensure authenticity. Lian Aldrich, co-founder of Aphotic Security, suggests terminating communication channels that may be compromised and establishing new ones. For instance, if someone emails claiming to be a bank, it's best to independently find the bank's fraud number and verify the information.
Good cybersecurity practices do not have to be expensive or complicated. Fordred emphasizes that protection is not difficult and can be achieved through simple measures such as using strong, unique passwords and limiting financial exposure. Password hygiene is crucial, and experts recommend using a combination of upper- and lower-case letters, numbers, and special characters. Avoiding the same password for multiple accounts is also essential.
Creating memorable and secure passwords can be achieved through various methods. Vanessa Maresch of Salt Essential IT suggests building passwords around memorable associations, while Rigo Reddig, head of information security at Grant Thornton Neuhaus, recommends creating a 'password story' using the first letter of each word to form a hard-to-crack password. Reputable password managers can also be used to create and store unique passwords for each account.
To further enhance online security, Fordred advises users to check if their email address has appeared in known data breaches using the website Have I Been Pwned. If an address has been compromised, users should take steps to secure their accounts, including changing passwords and enabling multi-factor authentication. While no single security measure is foolproof, a combination of simple, low-cost measures can significantly reduce the risk of cyberattacks.
Key points
- Humans are often the weakest link in cyberattacks, making simple, low-cost measures crucial for protection.
- Cybersecurity expert Andrew Fordred emphasizes the need for good practices, such as using strong, unique passwords and verifying communication through alternative channels.
- Reputable password managers and multi-factor authentication can significantly enhance online security.
