hex logo

Cyber Security Policies

Social Media & Email Security is Only as Good as Your Least Proficient Employee

Security by Design is a new approach to cybersecurity that builds in risk programs in a preventative way. The basis is to block a cybersecurity breach, rather than detecting and repairing systems, post compromise. This means training and policies placement for the whole workforce community. Making cyber security everyone's responsibility is the only way now to create a hardened attack surface.



PREVENTION IS THE NEW DETECTION


SOC teams thinking from the onset, enables global expansion & tech innovation with confidence rather than caution.

One way to manage these new controls is through social media policy - secure your weakest attack surface - the human - by setting a baseline risk score for each employee with our software automation. Then monitor their compliance to the newly implemented policy, even use our training tools that send contextualized spear phishing simulations for each person, using their exposed PII.

Constantly updating these social media procedures and policies as the IoT landscape changes, or new platforms gain popularity, is imperative to remain on top of emerging tech and its implications on cyber security. These guidelines should audited frequently, changing with say, work environment changes (i.e. remote teams much?)

Launch ongoing pen testing, monitoring, and compliance listening methods, say controversial speech - to keep your enterprise data secure from these social engineering attacks. No longer are cyber criminals just fiscally motivated, these attack vectors come from political, personal, and intelligence angles now.

1. DO YOU USE A BUSINESS EMAIL ACCOUNT FOR PERSONAL SOCIAL MEDIA ACCOUNTS OR PERSONAL EMAIL FOR BUSINESS ACTIVITIES?
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
When using social media NEVER use your business email account to create personal social media profiles. This also applies if creating a business profile, NEVER use your personal email to create this account. Separation of business and personal accounts is crucial to maximise your online safety.
2.  DO YOU USE THE SAME PERSONAL EMAIL ADDRESS FOR MOST OR ALL ONLINE ACCOUNTS?
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
The most frequently compromised information today is typically online services and social platforms. You should always have a personal email address that is only used between close family and friends and critical services such as banking, medical, etc. Keep one or two “throw-away” email accounts that you use for signups and other online services.
3. DO YOU USE A SINGLE EMAIL ADDRESS FOR PERSONAL COMMUNICATIONS, FINANCIAL, AS WELL AS REGISTERING FOR APPLICATIONS, PURCHASES, OR OTHER ONLINE ACCOUNTS?
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
If this is for personal use NEVER use a business email to register for these applications or accounts. If it fulfils a business need then always use your business email address.
4. DO YOU USE THE SAME PASSWORDS ON MULTIPLE ACCOUNTS?
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Password recycling across multiple accounts is NEVER considered best practice due to the fact that if you are compromised on one of your accounts an attacker can then potentially gain access to more sensitive accounts such as accounts linked to financial institutions.

If you answered yes to any of these questions your online security practices could be jeopardizing your security as well as the security of your employer.  Download our Social Media Use policy today understand how these and over 15 other online security best practices should be implemented to improve your security and the security of your employer

To download our COVID Remote Work Fullproof Social Media Policy, please enter your information

Get your copy of the Social Media User Policy
Oops! Something went wrong while submitting the form.