Deter - Take steps to reduce your risk

Becoming a victim of cybercrime has little to do with the size or type of your business. If you answer “yes” to one or more of the risk-assessment questions below, you should take steps to review the security of your computers and networks:

• Is important company or personal information stored on a computer, including information relating to you or your employees, customers, contractors or partners?
• Do you or your employees access important information through an internal computer network, including banking, credit card, vendor or delivery information?
• Do you have a company website?
• Do you or your employees use the Internet at work?
• Do you or your employees use email at work?
• Could your company survive if it lost the use of its computers for several days or longer?

Most companies use similar tools for their information technology infrastructure: desktop computers, operating systems, networks, storage devices, web browsers, laptop computers, mobile computing devices and smartphones —all of which are potential targets for cybercriminals. Conducting a periodic evaluation of your online banking risk and controls is highly recommended for the security and safety of your business.

If you don’t have formal and documented computer security procedures, your business may be unnecessarily at risk. Establish basic security procedures and controls for your business, and update and distribute them to all employees on a regular basis. Here are some important measures to consider:

• Reconcile Transactions: Reconcile all banking transactions on a daily basis.
• Dual Controls: Initiate electronic transactions (such as payroll and wire transfers) under dual control; higher-risk transactions such as wire transfers and automated clearing house (“ACH”) file transfers should require additional, non-Internet authentication.
• Sharing: Prohibit the use of “shared” usernames and passwords.
• Passwords: Use a different password for each website that is accessed; never use the same passwords for online banking and social media sites. Create strong passwords that have at least 8 characters and include a combination of numbers, special characters and mixed-case letters; never use your Social Security number or business Federal ID number. Change passwords every 45 to 60 days.
• Educate: Educate employees and your customers on information security practices.
• Links: Use extreme caution when accessing websites from a link in an email, especially if personal information is requested.
• Email: Do not include personal or sensitive data in response to an email. Do not send emails to your business clients from your personal computer at home.
• Red Flags: Be suspicious of emails appearing to be from financial institutions, government agencies or other organizations requesting account information, account verification or banking-access credentials.

One of the most important things you can do is safeguard your sensitive proprietary business as well as financial data and client information. Below are some practical and simple steps that will help get you started in protecting your most valuable information and your business accounts:

• Software: Use firewall, antispyware and antivirus software to protect your office computers (and keep this software updated). Visit This link opens in new tab: OnGuardOnline for more information.
• Update: Ensure virus protection and security software are updated regularly.
• Vendors: Never share usernames or passwords with third-party vendors. Consider vendor confidentiality agreements.
• Admin Rights: Limit administrative rights on users’ workstations.
• Banking: Never access bank, brokerage or other financial services information at Internet cafés or public libraries, as harmful software may have been installed to capture login information, leaving you vulnerable to potential fraud. Perform online banking activities on a standalone computer system from which email and web browsing are not possible. In addition, make sure your browser is operating in a secure session (indicated in the web address bar by “https”) and don’t leave a computer unattended.
• Auto-Fill: Avoid using automatic login features that save usernames and passwords for online banking.
• Web History: Regularly clear your web browser’s “history” in order to eliminate copies of web pages stored on hard drives.
• Social Engineering Tests: Consider conducting social engineering testing with your staff.
• Training: Train your employees and customers on your safeguards.
• Documents: Shred financial documents and paperwork containing sensitive information before being discarded.

When it comes to safe computing and protecting your vital private and financial information, you can never be too careful!  Even though the task can appear daunting, there are some very general, easy-to-institute precautions that will go a long way to mitigate your risk in this area and ensure the privacy and confidentiality of your most important information. 

Below are some suggested computer and information security “Best Practices” for you to consider.

• Always use common sense: When in doubt, err on the side of safety. Be suspicious of tempting animations on unprofessional-looking sites, and avoid clicking on strange links or attachments.
• Scan incoming email/attachments: Scan each attached file from email or IM messages, even those from trusted sources. Most PC security software automatically performs this function.
• Avoid downloading files you’re unsure about: Be on the lookout for files such as freeware, screensavers, games or other executable programs. Internet news groups and websites may be full of potential threats.
• Using media devices: Scan them before use. This is typically done automatically through your virus protection software. However, if you do not regularly update your virus software you could infect your computer by inserting a CD, flash drive or other media device.
• Frequently update your antivirus software: Even the best antivirus software isn’t much help unless you keep it updated. New PC threats emerge daily – even hourly – and variations can often be engineered to slip by previous software versions. Most antivirus software allows easy online updating.
• Protect system startups: Make sure to configure antivirus software to launch automatically and run constantly, ensuring that you’re always protected.
• Don’t automatically open email/attachments: This may seem redundant, but it’s important. Make sure your email application doesn’t automatically open messages (check the program’s "Options" or "Preferences" menus).
• Use desktop firewalls: Windows and Macintosh computers have basic desktop firewalls as part of their operating systems. When properly set-up and updated, these firewalls protect your computer files from being scanned.
• Backup, Backup, BACKUP: Backing up your machine regularly can protect you from the unexpected. Keep a few months' worth of backups and make sure the files can be retrieved if needed.
• Control access to your machine: Don't leave your computer in an unsecured area, or unattended and logged on, especially in public places. The physical security of your machine is just as important as its technical security.
• Portable devices: Be especially careful about what data you store on portable devices, like laptops, flash drives and smartphones. These are more easily lost and stolen and may require extra protections, like encryption or remote file deletion
• Be careful what you share on Social Media: Services like Facebook and Twitter present powerful and exciting technological tools and resources; however, these services also present risks. Be aware that anything you share can be preserved online indefinitely and be rapidly shared beyond your original intentions.
• Stay informed: Stay current with the latest developments for Windows, Macintosh, Linux and Unix systems.