cted standby mode if they are inactive for a specified amount of time, or they institute rules that all employees must shut down their computers at night. Training Employees on Security Best Practices Because employee actions can seriously impair security, training all personnel on the importance of security including strong passwords, ways to recognize to phishing, safeguarding passwords, and the importance of using encryption on company data stored on smartphones or tablets. Depending on the industry, there may be legal requirements on managing personal employee and customer information. For example, certain industries such as the medical and financial fields are required to keep client data stored on their computers private. Training on steps to protect this data is critical. According to a Chief Security Officer at a large credit union: User education is required by financial service regulations and is most effective. Training is the single most important way to prevent phishing attacks. We conduct security training every single month-with a new module monthly on some aspect of security. It's cloud-based education software that takes 5 to 10 minutes to complete. It has a small quiz 2 weeks after the security module has been made available. Staff with a perfect score on the quiz have an opportunity to be in a pool for a gift card drawing. People really like it and it keeps security fresh in their head. New www.TechnicalPDF.com employees are required to attend a classroom when they start at the company. We try to keep them engaged SO they retain the security information. The quizzes and prizes keep staff engaged SO they retain the information. Recognition of a Hacking Attack-Tactics for New Types of Viruses Just knowing when an organization has been infected with rogue, malignant data is one of the most difficult aspects of security management. Malware can lurk in company networks undetected for years. This occurred in the 2017 Equifax and the 2016 Yahoo! attacks. Publicity about customers whose private informa