{"id":960,"date":"2019-06-04T15:49:38","date_gmt":"2019-06-04T04:49:38","guid":{"rendered":"http:\/\/paulyeatman.net.au\/?p=960"},"modified":"2020-07-29T14:29:40","modified_gmt":"2020-07-29T03:29:40","slug":"10-ways-to-protect-your-digital-and-physical-security","status":"publish","type":"post","link":"https:\/\/paulyeatman.net.au\/index.php\/2019\/06\/04\/10-ways-to-protect-your-digital-and-physical-security\/","title":{"rendered":"10 Ways to Protect Your Digital and Physical Security"},"content":{"rendered":"

The following is an article I placed on LinkedIn<\/a> and was written as part of my Developing My Writing While Helping Others<\/em> series.<\/p>\n

I am a microbiologist with over 15 years\u2019 experience in the pharmaceutical industry supporting the manufacture of liquids, creams, ointments and tablets. I have a strong interest sterile manufacturing, leading and developing others. Recently I have been working closely with data security. I have an arty streak, an affinity for computers and ride bicycles\u2026a lot.
\nBefore I began working in IT security, my only thoughts to security were install an anti-virus, never share your password and to lock your doors and not to travel to dangerous parts of the world. These days, I have a more nuanced understanding of how to protect your physical and digital property.
\nToday your data is everywhere online. You can potentially lose your savings, access to various account and even your identity. With or without access to your online data, thieves can access your property and make off with your stuff.
\nIn no particular order, here are my top 10 tips to protect your digital and physical self.<\/p>\n

1. Restrict access<\/h4>\n

Without physical access to your property, it cannot be stolen. Physical access to a computer system makes theft easier. Hard drives can be removed and inserted into other systems. Routers can be reset. USB drives can be used to auto load malicious payloads.
\nUse user accounts for general use and save administrator accounts for system administration such as software installation or configuration. Systems that are not secure or are breached allow access to your data. Blocking ports on your devices that are no needed reduces your attack surface. Don\u2019t give your grandkiddies access to your computer unless they have their own restricted access account. I periodically remind my parent of this.
\nWhen creating an account or installing a new device, change the default password immediately.<\/p>\n

2. Use complex unique passwords<\/h4>\n

Use one key for your screen door, another for your front door, another for your server rack and another for your study. This may be inconvenient. Losing your property is more so.
\nFor data, make sure your passwords are unique for each resource you access. Password managers are handy here. NEVER use passwords such as \u201c12345\u201d or \u201cguessme\u201d. NEVER recycle passwords by adding numbers or letters to the end of an existing password when prompted to update one. If using a password manager, give it a long and complex password.<\/p>\n

3. Backup, backup, backup<\/h4>\n

For property, maintaining an inventory database is useful. This ensures in the event of theft or fire, you can substantiate (to the police, to your insurer) what has been lost and replacements sourced.
\nFor data, if it is important, back it up. Ideally a local backup for convenience and an off-site backup for disaster. In the past this involved burning data to tape, CD or DVD and storing copies off site. Today, many cloud providers allow you to back up data in real time off site. If you have gone to the trouble of backing up, you should test your backups periodically. There is no point losing data only to find your backups are corrupt. I backup my main PC to my server. I also backup online. I don\u2019t care about the data on my laptop.<\/p>\n

4. Hide keys to your identity<\/h4>\n

Access passes, addresses or rego numbers on keys These are ways to identify where they can be used in the event of loss. Don\u2019t store you keys in obvious locations when not using them. When keys were stolen from my partner\u2019s car, what they accessed could not identified. They were not keys for anything local.
\nYou should never wear your work passes on the way to work. A malicious actor could view your name and place of work while you commute and then send a targeted email as part of a social engineering or phishing campaign. You may even be called directly or your contact details found via social engineering.
\nNever store passwords in human readable form. Do not place them under your keyboard or stick them to your monitor of insert them behind the photo of a loved one.<\/p>\n

5. Don\u2019t give away information for free<\/h4>\n

See point 4 regarding passes and other personally identifiable information.
\nDon\u2019t discuss private information in public. Conversations on public transport, in a caf\u00e9, while walking and talking on your phone etc. are not private. Useful information about you and your movements and associations can be gleaned from these conversations.
\nIf you value your data, keep it to yourself. Most services perceived as free are not. Your data is the payment. Examples include Facebook, Google searches, email receipts sent to your phone, competitions requiring email entry etc.
\nWhen using portable computers, use a privacy shield to reduce the ease of shoulder surfing.
\nInformation you should never share includes social media posts about where you are. If a criminal knows where you live and knows or finds you on social media, a post about your current overseas or out of town holiday is an invite to rob you. Your fitness app profile could be used to find your social media profile and from there, your address and movements. If you must post about your holiday, do it when you get home.<\/p>\n

6. Use Multiple layers of security<\/h4>\n

Two or more layers of security are good here. Lock your external doors. Place a lock on your study\/computer room door. If your router is in a rack or another room, lock that too. Some companies use what are known as man traps. Only one person can pass through the entrance (or even exit) of a restricted area at any one time.
\nFor data, make sure your passwords are unique. Ideally use user accounts for general use and save administrator accounts for system administration such as software installation or configuration. Consider multiple forms of authentication, such as a password and also a fact or physical attribute.<\/p>\n

7. Never open email attachments (or click on links)<\/h4>\n

Most of your security comes down to your actions and opening an email attachment without 100% verifying the sender sent it is very unsafe. Email can be used to verify the account exists, seek information from you such as passwords, download and install ransomware, download and install CPU hijackers and more. Clicking on links could take you to websites that use known or unpatched flaws on your computer to compromise it and your data. Linked sites can also be used to elicit private information such as account numbers and passwords.
\nEven with the latest and greatest security program, there is a risk malicious programs or system compromise can occur. Security software relies on known malicious programs and known attack techniques. Criminals are constantly honing and improving their attacks.<\/p>\n

8. Encrypt<\/h4>\n

In the event that access to your data was obtained, encryption can prevent it being used. Only you (assuming you used solid passwords and a modern encryption protocol) will be able to access your data. If local or online data compromise occurs, encrypted data is useless to thieves.
\nLost or stolen laptop? Stolen computer? Lost phone? These are all useless (other than possibly resale value) to a criminal. Without encryption, data compromise is inevitable. With encryption, despite what you see on CSI, it will take more than 1000 years to gain access to your encrypted data.<\/p>\n

9. Monitor your property<\/h4>\n

For your property, keeping an eye on it helps you to track it and prevent theft. This could extend to security cameras. Auto notification emails or texts can be set up on systems where motion is detected.
\nSystems such as intrusion detection and prevention system can be used to monitor hacking attempts. Many online services send emails when an unrecognized IP address access an account of yours. Examining user access logs and system logs allows you to determine out of place activity.<\/p>\n

10. Provide a false impression<\/h4>\n

You can use pseudonyms when using the Internet. If you run servers, use a honey pot to mislead hackers. Use a device that emulates TV glow when you are traveling. Use timers for lights. Arrange a neighbor to empty your letterbox to give the impression someone is home if you are not.<\/p>\n

Do you agree with this list? Do you have anything to add or your own security ideas? Share them in the comments section or message me directly.<\/p>\n

Did you find this informative or useful? Please consider a small donation so I can expand and improve on what I deliver.<\/strong><\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

The following is an article I placed on LinkedIn and was written as part of my Developing My Writing While Helping Others series. I am a microbiologist with over 15 years\u2019 experience in the pharmaceutical industry supporting the manufacture of liquids, creams, ointments and tablets. I have a strong interest sterile manufacturing, leading and developing […]<\/p>\n","protected":false},"author":1,"featured_media":974,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[49],"class_list":["post-960","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-advice-provided","tag-data-integrity"],"_links":{"self":[{"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/posts\/960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/comments?post=960"}],"version-history":[{"count":5,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/posts\/960\/revisions"}],"predecessor-version":[{"id":1186,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/posts\/960\/revisions\/1186"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/media\/974"}],"wp:attachment":[{"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/media?parent=960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/categories?post=960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/paulyeatman.net.au\/index.php\/wp-json\/wp\/v2\/tags?post=960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}