PICTURE: PEXELS/ AI25 STUDIO
Cybersecurity is no longer just the responsibility of an organisation’s IT department. Every employee plays a role in protecting sensitive information, company systems and customer data from cyber threats.
A single click on a malicious email or the use of a weak password can expose an organisation to costly cyberattacks.
Also see: Lack of cybersecurity skills leaves South Africans vulnerable
Developing good cybersecurity habits at work can help reduce the risk of data breaches and keep both your personal and professional information safe.
Here are some essential practices every employee should adopt.
Use strong, unique passwords
Using the same password across multiple accounts makes it easier for cybercriminals to gain access to sensitive information if one account is compromised. Create strong passwords that combine uppercase and lowercase letters, numbers and special characters.
According to the Cyber Security Hub, using unique passwords for every account significantly reduces the impact of credential theft and password reuse attacks.
Enable multi-factor authentication (MFA)
Whenever possible, turn on multi-factor authentication. MFA adds an extra layer of security by requiring a second form of verification, such as a code sent to your phone or an authentication app.
Cybersecurity and Infrastructure Security Agency (CISA) notes that MFA makes it much harder for attackers to access accounts, even if they know your password.
Be cautious of phishing emails
Cybercriminals often disguise fraudulent emails as legitimate messages from trusted organisations or colleagues. Before clicking on links or downloading attachments, check the sender’s email address and look for spelling mistakes, unusual requests or urgent language.
The National Cyber Security Centre (NCSC) advises employees to verify suspicious requests through another communication channel before responding.
Keep your software updated
Software updates often include security patches that fix vulnerabilities cybercriminals can exploit. Delaying updates leaves your devices more vulnerable to attacks.
Enable automatic updates for your operating system, antivirus software and work applications whenever possible.
Lock your devices when away
Whether you’re working in an office or remotely, always lock your computer when stepping away from your desk. This simple habit helps prevent unauthorised access to confidential information.
It only takes a few seconds to lock your screen, but it can prevent significant security incidents.
Avoid using public Wi-Fi without protection
Public Wi-Fi networks are convenient but can expose your data to cybercriminals if they are unsecured.
If you need to work outside the office, use your company’s virtual private network (VPN) or a trusted mobile hotspot to encrypt your internet connection.
Also see: Toss refunded after speaking out about alleged Uber Eats fraud
Think before sharing sensitive information
Not everyone needs access to every document or piece of company information. Share confidential files only with authorised colleagues and avoid sending sensitive data through unsecured messaging platforms or personal email accounts.
The South African Banking Risk Information Centre (SABRIC) recommends treating sensitive information carefully and verifying requests before sharing confidential data.
Back up important files
Although many businesses automatically back up data, it’s still important to follow company backup procedures. Regular backups help organisations recover quickly from ransomware attacks, accidental deletion or hardware failures.
Always save work files in approved cloud storage or company-approved systems.
Report suspicious activity immediately
If you accidentally click on a suspicious link or notice unusual computer behaviour, don’t ignore it. Reporting potential security incidents early allows your IT department to respond before the situation becomes more serious.
Remember that reporting a mistake quickly is often more helpful than trying to fix the problem yourself.
Stay informed about cybersecurity
Cyber threats continue to evolve, making ongoing learning essential. Take part in workplace cybersecurity training, read company security updates and stay informed about common scams targeting employees.
According to Microsoft, regular cybersecurity awareness training is one of the most effective ways to reduce human error, which remains a leading cause of security incidents.
Small habits make a big difference
Cybersecurity doesn’t require advanced technical skills. Simple habits such as creating strong passwords, recognising phishing attempts, updating software and reporting suspicious activity can significantly reduce the risk of cyberattacks.
By making cybersecurity part of your daily routine, you help protect not only your own work but also your colleagues, customers and the organisation as a whole.
Also see: Embracing the changing faces of professionalism in today’s workplace
Be the first to know – Join our WhatsApp channel for content worth tapping into. Click here to join!