The Weakest Link in the Chain

Human error responsible for most cyber-attacks.

Even the most sophisticated cyber solutions are unable to prevent human error.

We spend a lot of time and money these days protecting our computers and data from cybersecurity threats and attacks.  In fact, most companies are spending more on cybersecurity than ever before.  And…cyber-attacks are still just as successful as ever before. 

So why?  Why are we still experiencing such a large degree of successful cybersecurity attacks and breaches?  After all, we’re investing more in additional cyber protection software and solutions.  We’ve established policies for protecting our IT and invested in solutions to safeguard our data. 

Even though we’re spending more dollars and investing more resources in cybersecurity protections it still can’t protect us from the weakest link in our cybersecurity strategy; which is human error. 

The majority of successful cybersecurity attacks are the result of someone in the company slipping up.  In fact, researchers from Stanford University found that approximately 88 percent of all data breaches are caused by an employee mistake. Another security firm estimated it to be 82 percent.  This all because the employee might have:

• clicked on the email they should not have,

• unsuspectingly provided login credentials, or

• fell for the fake email request from an executive.

Fortunately, there are practical steps you can take to bolster your cybersecurity hygiene and reduce the risk of falling victim to these threats. Here are some essential tips and tools to help you stay secure online.

1. Be Cautious with Emails and Links

Phishing attacks are one of the most common ways cybercriminals try to steal your personal information. These attacks often come in the form of deceptive emails that appear legitimate. To avoid falling prey:

• Verify Senders: Always check the sender's email address. Legitimate organizations usually use professional domains (e.g., @company.com), not free email services like Gmail or Yahoo.

• Avoid Clicking Suspicious Links: Hover over links to see where they lead before clicking. If the URL looks suspicious or unfamiliar, don’t click it.

Tool to Use: Phishing Filter in Browsers. Most modern web browsers like Chrome and Firefox have built-in phishing filters that can help detect and block malicious websites.

2. Use Strong, Unique Passwords

Weak passwords have become easier for cyber criminals to hack your online accounts. To ensure your accounts are secure:

• Create Complex Passwords: Use a mix of letters, numbers, and special characters. Avoid easily guessable information like birthdays or common words.

• Use Different Passwords for Different Accounts: Don’t use the same password across multiple sites. If one site gets compromised, other accounts are at risk.

Tool to Use: Password Managers. Applications like LastPass or 1Password can generate and store complex passwords, making it easier to manage unique passwords for each account securely.

3. Enable Two-Factor Authentication (2FA)

2FA, also known as multi-factor authentication (MFA), adds an extra layer of security by requiring two forms of verification—something you know (password) and something you have (a code sent to your phone). This way, even if someone obtains your password, they can’t access your account without the second factor.

Tool to Use: Authenticator Apps. Google Authenticator or Authy can generate time-based one-time passwords (TOTP) that you need to log in. Many services offer 2FA and integrate well with these apps.

4. Keep Software and Systems Updated

Cybercriminals often exploit vulnerabilities in outdated software. Regular updates help patch these vulnerabilities and improve overall security.

• Enable Automatic Updates: Most operating systems and software have an option to automatically download and install updates.

• Update All Software: This includes your operating system, web browsers, and any applications you use.

Tool to Use: Patch Management Tools. Atera, NinjaOne, or Kaseya VSA can help manage updates for various software applications, ensuring you’re always running the latest versions.

5. Back Up Your Data Regularly

In case of a ransomware attack, having recent backups can save your data. Ransomware encrypts your files and demands payment for the decryption key. Regular backups ensure that even if you fall victim, you can restore your data without paying the ransom.

• Use Cloud Storage: Services like Google Drive, Egnyte or Dropbox offer automatic backups and version control.

• External Hard Drives: Regularly back up critical files to an external drive stored in a secure location.

Tool to Use: Backup Software. Acronis, Backblaze or iDrive can automate backups and provide additional features like encryption and remote access.

6. Educate Yourself About Cybersecurity

Knowledge is power. Understanding common threats and best practices can help you avoid mistakes that lead to security breaches.

• Take Online Courses: Websites like Coursera and Udemy offer courses on cybersecurity basics.

• Follow Cybersecurity Blogs: Stay informed about the latest threats and safety tips by following reputable cybersecurity blogs and news sites.

Tool to Use: Security Awareness Training Platforms. Platforms like KnowBe4 offer training modules that teach you how to recognize and avoid various cyber threats.

7. Use Reliable Security Software

Having a robust antivirus and anti-malware solution can add an additional layer of protection to your devices.

• Install Comprehensive Security Software: Look for software that provides real-time protection, firewall capabilities, and malware detection.

Tool to Use: Antivirus Programs. Bitdefender and Sentinel One offer comprehensive security solutions to protect against a wide range of threats.

* * * * * *

Maintaining good cybersecurity hygiene is essential in today’s digital world. Implementing these practices and leveraging available tools will help ensure a safer online experience. Stay vigilant and remember that proactive measures are key to effective cybersecurity.

RIATA can help your company with assessing your cybersecurity posture and provide recommendations on what may be needed.  Contact RIATA today and we’ll be glad to provide a no obligation consultation to help you better understand your options and total costs.

About the Author:  Tommy Wald is CEO of RIATA Technologies, a Managed IT Services Provider headquartered in Austin, TX.  He can be reached at TWald@RiataTechnologies.com or (737) 249-9697.