Trick-or-treating is a popular Halloween tradition in western countries. Most of us associate "treats" with some form of candy, and "tricks" as possible pranks or other forms of mischief if a treat is not given by the homeowner. Halloween is also about dressing up as ghosts, ghouls, and other spooky creatures.
Did you know October is also National Cybersecurity Awareness Month in the United States? Every October, the federal government and its industry partners celebrate National Cybersecurity Awareness Month. This year, U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) recommends going "back to basics" and strengthening your cybersecurity for ePHI.
Protecting PHI can seem as scary as Halloween ghosts and ghouls but it doesn't have to be.
Back to Basics Tips
To prevent spooky mischief from haunting your ePHI follow these back to basics tips:
Have a Strong Password
Ensure you use a strong password (i.e. usually 10characters or more and includes uppercase and lowercase letters, numbers, and special characters like #$&*). Recent research suggests users could also consider using "passphrases," which are sentences that may be easier to remember than a very complex password.
Training staff should be trained regularly on important cyber security issues, such as how to spot phishing e-mails and when/who to report possible cyber incidents to in your business.
A username and password may not be adequate to protect sensitive information, privileged accounts, or information accessed remotely. As part of its risk analysis, an entity should determine what authentication schemes to use to protect its systems and sensitive information (e.g. e-PHI). Multi-factor authentication typically includes a password and additional security measures, such as a thumbprint or key card.
Updates and Patching
You should update and patch your systems and applications regularly, because updates and patches often fix critical security vulnerabilities.
Limit physical access to devices and lock devices when not in use.
Be cautious when plugging a phone, USB, or other portable device into a secure computer or network. Portable storage devices may not be as secure and may contain malicious software that could corrupt your secure network. If the device is needed, be sure to follow your organization's policies on the use of such devices, which could include prohibitions on the use of personal devices or having IT personnel review such devices to ensure they do not contain malicious software.
Do Not Wait
Do not wait to report possible cybersecurity threats to the right people in your organization. Time is often critical during a cyber-incident, so if you suspect a cyber-threat, report it right away.
While October is National Security Awareness Month, we all need to be watchful and proactive to avoid tricks to our ePHI every day of the year because cybersecurity threats are downright spooky. Happy Halloween!
If you have any questions about these basic cybersecurity tips or would like additional support preventing system "tricks" (e.g., mischief, threats, etc.), contact us today by email: firstname.lastname@example.org or by phone: 855-427-0427.
Kutengeneza karamu ni desturi maarufu ya Halloween katika nchi za magharibi. "Wengi wetu tunahusianisha ""kinywaji"" na aina fulani ya peremende, na ""tricks"" kama pranks iwezekanavyo au aina nyingine za uovu ikiwa mpenzi wa nyumba haitoi kipande fulani." Halloween pia ni kuhusu kuvaa mavazi ya roho, roho waovu, na viumbe wengine wa kutisha. Je, unajua Oktoba pia ni Mwezi wa Kitaifa wa Uhamasishaji wa Usalama wa Mtandao nchini Marekani? Kila Oktoba, serikali ya shirikisho na washirika wake wa tasnia husherehekea Mwezi wa Kitaifa wa Uhamasishaji wa Usalama wa Mtandao. Ofisi ya Haki za Kiraia ya Idara ya Afya na Huduma za Binadamu (OCHR) inapendekeza kurudi kwa msingi na kuimarisha usalama wa mtandao kwa ajili ya EPHI. Ulinzi wa afya ya afya unaweza kuonekana kuwa wa kutisha kama roho za Halloween na roho mbaya lakini haipaswi kuwa hivyo. Ili kuepuka uharibifu wa siri kutoka kwa hunting yako ePHI, fuata hizi nyuma ya vidokezo vya msingi: Kuwa na Nenosiri la Nguvu Kwa kawaida, alama za 10 au zaidi zinahusisha herufi kubwa na ndogo, nambari, na herufi maalum kama #, #, #, na #. Utafiti wa hivi karibuni unaonyesha watumiaji wanaweza pia kufikiria kutumia "passphrases", ambayo ni sentensi ambazo zinaweza kuwa rahisi kukumbuka kuliko nenosiri tata sana. Mwalimu wa usalama wa mtandao anapaswa kufundishwa mara kwa mara juu ya masuala muhimu ya usalama wa mtandao, kama vile jinsi ya kutambua barua pepe za udanganyifu na wakati na kwa nani kuripoti matukio ya mtandao katika biashara yako. Jina la mtumiaji na nenosiri huenda isiwe ya kutosha kulinda habari nyeti, akaunti zenye haki, au habari inayopatikana kwa mbali. Kama sehemu ya uchambuzi wake wa hatari, shirika linapaswa kuamua ni nini mifumo ya uthibitisho ya kutumia kulinda mifumo yake na habari nyeti (kwa mfano, e-PHI). Uthibitisho wa sababu nyingi kwa kawaida ni pamoja na nenosiri na hatua za ziada za usalama, kama vile alama ya kidole au kadi ya ufunguo. Updates na Patches: Ukurasa wa sasa na patches kwa ajili ya programu yako ni muhimu kwa ajili ya kuboresha usalama wa mfumo na programu. Punguza upatikanaji wa vifaa vya kimwili na kufunga vifaa wakati havitumiki. Uwe mwangalifu unapoweka simu, USB, au kifaa kingine kinachoweza kubebwa kwenye kompyuta au mtandao uliohifadhiwa. Vifaa vya kuhifadhi vya kubebeka vinaweza kuwa salama na vinaweza kuwa na programu mbaya ambayo inaweza kuharibu mtandao wako salama. Ikiwa kifaa kinahitajika, hakikisha ufuate sera za shirika lako juu ya matumizi ya vifaa kama hivyo, ambayo inaweza kujumuisha marufuku ya matumizi ya vifaa vya kibinafsi au kuwa na wafanyikazi wa IT kuangalia vifaa kama hivyo ili kuhakikisha havina programu mbaya. Usisubiri kuripoti vitisho vya usalama wa mtandao kwa watu sahihi katika shirika lako. Wakati ni muhimu wakati wa tukio la mtandao, kwa hivyo ikiwa unashuku tishio la mtandao, ripoti mara moja. Oktoba ni Mwezi wa Uhamasishaji wa Usalama wa Kitaifa, lakini tunahitaji kuwa macho na kuepuka hila za EPHI kila siku ya mwaka kwa sababu vitisho vya usalama wa mtandao ni vya kutisha. Heri ya Halloween! Ikiwa una maswali yoyote kuhusu vidokezo hivi vya msingi vya usalama wa mtandao au ungependa msaada wa ziada kuzuia "tricks" za mfumo (kwa mfano, uovu, vitisho, nk). "Kama unavyoona, unaweza kuwasiliana na kampuni yetu kwa barua pepe: ""Mimi"" au kwa simu: ""Mimi"" au ""Mimi"" (855-427-427)."