Presentation on personal digital security for the Overseas Security Advisory Council (OSAC) Bureau of Diplomatic Security - United States Department of State.

1. Personal Digital Security
Implications for the home and the office
Sponsored by
Lydia Kostopoulos, PhD
@LKCYBER
June 4, 2015

2. Personal Digital Security
What it entails.
What it means for you:
• As an individual
• As an employee for your company
What you can do about it

3. Personal Digital Security
• Protection of your identity,
communications, accounts,
assets and technology
from malicious intruders.
• Protection of personal
tools: SIM cards,
contactless credit cards,
health and digital security
devices, biometric data,
IOTs, etc.

5. • Read Terms of Service (ToS) and Privacy Policies before agreeing.
• Update and patch software often.
• Don’t share personal information unless absolutely necessary.
• Don’t click on suspicious links and do not open email attachments from people you don’t know.
• Be conscious of meta-data.
• Read Terms of Service (ToS) and Privacy Policies before agreeing.
• Pay attention to the site link at the top and make sure it is a secure connection.
• Avoid being a phishing victim and pay attention to email headers to make sure they are legit.
HOME
Leakage awareness!

6. Personal Digital Security

7. • Read Terms of Service (ToS) and Privacy Policies before agreeing.
• Update and patch software often.
• Don’t share personal information unless absolutely necessary.
• Don’t click on suspicious links and do not open email attachments from people you don’t know.
• Be conscious of meta-data.
• Read Terms of Service (ToS) and Privacy Policies before agreeing.
• Pay attention to the site link at the top and make sure it is a secure connection.
• Avoid being a phishing victim and pay attention to email headers to make sure they are legit.
OFFICE
Policies!

8. Data Loss Prevention (DLP)

9. Source: COMSEC Consulting: Information Security

10. What measures have you taken to secure the following?

13. Security is an evolving process.
Keep an open mind
to learning!
Awareness
is key.
Stress Reduction Kit
Bang
Head
Here
Directions:
1. Place kit on FIRM surface.
2. Follow directions in circle of kit.
3. Repeat step 2 as necessary, or until unconscious.
4. If unconscious, cease stress reduction activity.

14. “Digital equivalent of locking
the front door to your home and
not leaving your car keys in the
ignition”. – Marc Goodman
Avoid 85% of
common digital
threats.

15. Government
Cyber Security Evaluation Tool
(self-assessment)
FBI and Private Sector Partnership
Association of persons who represent businesses,
academic institutions, state and local law enforcement
agencies, and others dedicated to sharing information
and intelligence to prevent hostile acts against the U.S.
• Meetings
• Newsletters
• Briefs
https://ics-cert.us-cert.gov/Assessments
https://www.infragard.org
http://www.stopthinkconnect.org/
https://www.fcc.gov/cyberforsmallbiz
• Cyber Security Tips for Small Businesses
Guide
Keeping Your Social Media Accounts Secure
Defense Media Activity
• Protective Measures
• Checklist
• Social Media Tips

16. Government

17. Private Sector
https://www.social-engineer.com
• Social Engineering
• Physical Security
• Information Security
https://www.securingthehuman.org
• Awareness Posters/Presentations
• Newsletter
• Security Awareness Guidance
• Internet Security for Kids
Newsletter on latest phishing trendshttps://www.knowbe4.com

18. Non-Profit
http://www.antiphishing.org/
• In association with CyLab at Carnegie Mellon
• Education Initiative
• Phishing landing page example
• HTTPS Everywhere Add-On
https://www.eff.org/https-everywhere
https://www.staysafeonline.org/business-safe-online/
Resources for businesses
• Risk Assessment
• Threat monitoring strategies
• Reporting cyber attacks
• Implementing a cybersecurity plan
• Protecting customers
• Training employees
• Training & Videos
• Guides
• Newsletters & Tips

19. Everyone plays a role in corporate security.