staying safe online for hr professionals

27
G VC SH R M Ju n e 17 , 2 0 1 5 Ben Woelk Program Manager Information Security Office RIT Staying Safe Online for HR Professionals

Upload: ben-woelk-cissp

Post on 07-Aug-2015

54 views

Category:

Business


1 download

TRANSCRIPT

Page 1: Staying Safe Online for HR Professionals

GV

C S

HR

MJu

ne 1

7, 2015 Ben WoelkProgram Manager

Information Security Office

RIT

Staying Safe Online for HR Professionals”

Page 2: Staying Safe Online for HR Professionals

Introduction

Page 3: Staying Safe Online for HR Professionals

Awareness is the key

Everyone is a target

Organized crime funds the attacks

Page 4: Staying Safe Online for HR Professionals

Threat Landscape—What’s Being Stolen

Page 5: Staying Safe Online for HR Professionals

Thre

at

Landsc

ape

Valu

e o

f In

form

ati

on

Page 6: Staying Safe Online for HR Professionals

Thre

at

Landsc

ape

Bro

wse

r Vuln

era

bili

ties

Page 7: Staying Safe Online for HR Professionals

Thre

at

Landsc

ape S

oci

al

Media

Page 8: Staying Safe Online for HR Professionals

Thre

at

Landsc

ape

Mobile

Vuln

era

bili

ties

Page 9: Staying Safe Online for HR Professionals

Thre

at

Landsc

ape

Ranso

mw

are

Page 10: Staying Safe Online for HR Professionals

Solu

tions

Page 11: Staying Safe Online for HR Professionals

Creating and using strong passwords, aka passphrases

Length > complexity

TIP #1 It was a dark and

stormy night

becomes

ItwasaDark215andStormyNight

Page 12: Staying Safe Online for HR Professionals

Pass

word

s

https://www.grc.com/haystack.htm

Page 13: Staying Safe Online for HR Professionals

Pass

word

Safe

s

Page 14: Staying Safe Online for HR Professionals

Keep Your Software (and Hardware up to date!

TIP #2

Page 15: Staying Safe Online for HR Professionals

Layers of

security

Anti-virus

Firewall

Don’t overlook

mobile devices!

TIP #3Use protection

Page 16: Staying Safe Online for HR Professionals

Recognize phishing & scams

TIP #4

Page 17: Staying Safe Online for HR Professionals

Use social networks

safely

Don’t post schedules or whereabouts

TIP #5

Page 18: Staying Safe Online for HR Professionals

Phishing on social networkingsites

Page 19: Staying Safe Online for HR Professionals

Remember who else

is there• Employers

• Identity thieves

• Online predators

TIP #6

Page 20: Staying Safe Online for HR Professionals

Don’t post inappropriate photos!

What you

post can be

used to…

* Judge

* Impersonate

* Monitor

Page 21: Staying Safe Online for HR Professionals

Be wary of others

Is this really your friend..?

TIP #7

Page 22: Staying Safe Online for HR Professionals

TIP #8

Monitor use of your name

Page 23: Staying Safe Online for HR Professionals

Guard your personal

information

Watch out for Facebook applications!

TIP #9

Page 24: Staying Safe Online for HR Professionals

Never assume privacy

Do you care if Facebook

captures where you’ve been?

TIP #10

Page 25: Staying Safe Online for HR Professionals

Cool T

ools

Google DashboardBrowser Plugins NoScript McAfee Site Advisor Web of Trust (WoT)

Secunia PSIPassword Safes

Page 26: Staying Safe Online for HR Professionals

Reso

urc

es

Goodreads Cyber Security Library

https://www.goodreads.com/

search?q=cyber+security+li

brary Infosec Communicator

Blogbenwoelk.com Shockproofing Your Use

of Social Media eBook

http://amzn.com/B00OJMK4T2

ISTR20 Internet Security Threat

Report. April 2015, Symantec

http://www.symantec.com/security_resp

onse/publications/threatreport.jsp

Page 27: Staying Safe Online for HR Professionals

Questions (and maybe some answers)

Ben Woelk

[email protected]

Benwoelk.com

@benwoelk

www.linkedin.com/in/benwoelk/