Kev tswj hwm kev pheej hmoo zoo tshaj plaws

Risk Management banner

Kev Tswj Xyuas Kev Ruaj Ntseg Hauv Kev Tshaj Tawm rau Cov Neeg Ua Haujlwm Ua Haujlwm (M2DMM)

Kev tswj hwm kev pheej hmoo tsis yog qhov yooj yim, tsis yog qhov tshwm sim ib zaug lossis kev txiav txim siab, tab sis nws yog qhov tseem ceeb. Nws kuj yog tag nrho, kev xaiv koj ua (lossis tsis ua) hauv ib cheeb tsam cuam tshuam rau tag nrho. Peb xav pab koj los ntawm kev sib qhia qee qhov kev coj ua zoo tshaj plaws uas peb tau khaws los ntawm txoj kev. Thov kom peb ua siab loj thawb rov qab tawm tsam kev ntshai thaum tso siab rau kev txawj ntse, thiab thov kom Vajtswv muab kev nkag siab rau peb kom pom ntawm ob qho tib si.

Yog tias koj xav ntxiv ib yam dab tsi koj tau kawm, thov tawm tswv yim rau hauv qab.


Ntxiv Kev Tiv Thaiv rau koj cov khoom siv

Ua nws ib feem ntawm koj daim ntawv cog lus koom tes uas M2DMM cov tswv cuab yuav tsum ruaj ntseg lawv cov khoom siv (ie, laptop, desktop, ntsiav tshuaj, hard drive, xov tooj ntawm tes)

kev ruaj ntseg txawb

➤ Qhib lub xauv npo (xws li, yog tias koj lub cuab yeej tsis ua haujlwm li 5 feeb, nws yuav kaw thiab xav tau tus password).

➤ Tsim cov passwords / biometrics muaj zog rau kev nkag mus rau cov khoom siv.

➤ Encrypt cov cuab yeej.

➤ Nruab ib daim ntawv thov Antivirus.

➤ Ib txwm nruab qhov hloov tshiab tshiab.

➤ Tsis txhob qhib lub autofill.

➤ Tsis txhob nkag mus rau hauv cov nyiaj.

➤ Siv VPN rau kev ua haujlwm.


Kev Ruaj Ntseg Sockets Layer (SSL) lossis HTTPS

Yog tias lub xaib tsis muaj daim ntawv pov thawj SSL, nws yog qhov tseem ceeb uas nws tau teeb tsa. SSL yog siv los tiv thaiv cov ntaub ntawv rhiab xa mus thoob plaws Is Taws Nem. Nws yog encrypted kom tus neeg tau txais kev pab tsuas yog tus uas tuaj yeem nkag mus tau. SSL yog qhov tseem ceeb rau kev tiv thaiv cov neeg nyiag nkas.

Ib zaug ntxiv, yog tias koj tau tsim lub vev xaib, txawm tias nws yog lub vev xaib thov Vajtswv, lub vev xaib tshaj tawm, lossis a Cov Cai Piv txwv li, koj yuav tsum teeb tsa SSL.

Yog tias lub vev xaib muaj daim ntawv pov thawj SSL, qhov URL yuav pib nrog https://. Yog tias nws tsis muaj SSL, nws yuav pib nrog http://.

Kev Tswj Xyuas Kev Nyab Xeeb Zoo Tshaj Plaws: Qhov txawv ntawm SSL thiab tsis yog

Txoj kev yooj yim tshaj plaws los teeb tsa SSL yog los ntawm koj qhov kev pabcuam hosting. Google koj qhov kev pabcuam hosting lub npe thiab yuav teeb tsa SSL li cas, thiab koj yuav tsum tuaj yeem nrhiav cov lus qhia yuav ua li cas.

Piv txwv ntawm cov chaw hosting thiab lawv cov lus qhia kev teeb tsa SSL:


Ruaj ntseg thaub qab

Kev ruaj ntseg thaub qab yog qhov tseem ceeb hauv kev tswj hwm kev pheej hmoo. Koj yuav tsum muaj cov ntaub ntawv thaub qab rau koj cov ntaub ntawv thaub qab rau koj txhua lub vev xaib suav nrog koj cov thwjtim.Tools piv txwv. Ua qhov no rau koj tus kheej cov khoom siv thiab!

Yog hais tias koj muaj kev ruaj ntseg backups nyob rau hauv qhov chaw, ces koj yuav tsis tau txhawj txog lub website crashes, yuam kev deletion, thiab lwm yam loj yuam kev.


Website Backups


Amazon s3 logo

Kev khaws cia tseem ceeb: Teeb tsa cov thaub qab tsis siv neeg txhua lub limtiam mus rau qhov chaw ruaj ntseg. Peb pom zoo Amazon S3.

Google Drive Logo

Secondary thiab Tertiary Cia: Qee lub sij hawm thiab tshwj xeeb tshaj yog tom qab kev hloov kho tseem ceeb, ua cov ntawv theej ntawm cov thaub qab hauv ob peb lwm qhov chaw ruaj ntseg cia (piv txwv li, Google Drive thiab / lossis encrypted thiab password tiv thaiv sab nraud hard drive)


Yog tias koj siv WordPress, xav txog cov thaub qab plugins no:

UpdraftPlus logo

Peb pom zoo thiab siv UpraftPlus rau peb cov thaub qab. Cov dawb version tsis thaub qab Disciple.Tools cov ntaub ntawv, yog li siv cov plugin no, koj yuav tsum them tus nqi hwm tus account.


BackWPup Pro logo

Peb kuj tau sim BackWPup. Cov plugin no yog dawb tab sis nyuaj rau kev teeb tsa.


Txwv Kev nkag mus

Qhov kev nkag tau ntau dua koj muab rau cov nyiaj, qhov kev pheej hmoo siab dua. Tsis yog txhua tus yuav tsum muaj lub luag haujlwm Admin ntawm lub vev xaib. Tus Admin tuaj yeem ua txhua yam rau lub xaib. Kawm txog cov luag haujlwm sib txawv rau koj qhov chaw thiab muab lawv tawm raws li tus neeg lub luag haujlwm.

Yog tias muaj kev ua txhaum cai, koj xav kom muaj cov ntaub ntawv tsawg kawg nkaus. Tsis txhob muab kev nkag mus rau cov nyiaj muaj txiaj ntsig rau cov neeg uas tsis tswj hwm cybersecurity kev coj ua zoo tshaj plaws.

Siv lub hauv paus ntsiab lus no rau cov vev xaib, social media accounts, password managers, email marketing services (ie, Mailchimp), thiab lwm yam.


Yog tias koj siv lub vev xaib WordPress, koj tuaj yeem hloov tus neeg siv lub luag haujlwm thiab kev tso cai tso cai.

Kev tswj hwm kev pheej hmoo: hloov kho cov neeg siv teeb tsa kom txwv lawv cov kev tso cai


Ruaj ntseg Passwords

Ua ntej tshaj, Tsis txhob SHARE PASSWORDS nrog lwm tus. Yog tias koj yuav tsum yog vim li cas, hloov koj tus password tom qab.

Qhov thib ob, nws yog qhov tseem ceeb uas txhua tus neeg uas yog ib feem ntawm koj pab pawg M2DMM siv cov password ruaj ntseg.

Qhov ntau tus neeg muaj kev nkag tau mus, ntau lub siab xav lawv yuav xav tau txog kev muaj tus password sib txawv rau txhua tus account.


Nws yuav luag tsis yooj yim sua kom nco qab cov passwords no, thiab nws tsis yog qhov zoo los sau koj cov passwords hauv phau ntawv sau lossis khaws cia ncaj qha rau koj lub computer. Xav txog kev siv tus tswj tus password zoo li 1Password.


kuv puas tau pw? logo

Xyuas kom tseeb tias koj tus email tau kos npe rau Kuv puas tau pwd?. Qhov chaw no yuav ceeb toom rau koj thaum koj tus email tshwm nyob rau hauv hacked thiab leaked database online. Yog tias qhov no tshwm sim, hloov koj tus password tam sim.


Kev Qhia 2-Ntu

Thaum twg ua tau, siv 2-kauj ruam pov thawj. Qhov no yuav muab koj cov nyiaj digital tshaj kev tiv thaiv los ntawm hackers. Txawm li cas los xij, nws yog qhov tseem ceeb uas koj ruaj ntseg khaws cov lej thaub qab rau txhua tus account uas koj siv nrog. Qhov no yog nyob rau hauv rooj plaub uas koj poob lub cuab yeej uas koj siv rau 2-kauj ruam pov thawj.

2-kauj ruam pov thawj


Ruaj Ntseg Email

Koj xav tau ib qho kev pabcuam email uas nyob twj ywm rau ntawm qhov tseeb kev ruaj ntseg nta. Tsis tas li ntawd, tsis txhob siv koj tus kheej lub npe lossis txheeb xyuas cov ntsiab lus hauv koj cov ntaub ntawv siv.


Gmail Logo

Gmail yog ib qho ntawm cov kev pabcuam email rau kev ruaj ntseg email. Yog tias koj siv nws, nws sib xyaw thiab tsis ua rau nws zoo li koj tab tom sim ua kom ruaj ntseg.


Proton Mail Logo

Proton Mail yog tshiab thiab tam sim no muaj cov tshiab tshiab. Yog tias koj siv nws, nws pom tseeb tias koj tab tom sim siv email ruaj ntseg thiab nws tsis sib xyaw nrog lwm cov emails.



Cov Npe Ntawm Cov Vaj Tse (VPNs)

VPNs yog ib yam uas yuav tsum xav txog thaum twg koj tab tom ua kev tswj hwm npaj. Yog tias koj nyob hauv qhov chaw muaj kev pheej hmoo siab, VPN yuav yog lwm txheej tiv thaiv kev ua haujlwm M2DMM. Yog tias koj tsis ua, nws yuav yog lossis tsis tsim nyog.

Tsis txhob siv VPN thaum nkag mus rau Facebook, vim qhov no yuav ua rau Facebook kaw koj tus account tshaj tawm.

VPNs hloov tus IP chaw nyob ntawm lub computer thiab muab koj cov ntaub ntawv ib txheej ntxiv ntawm kev tiv thaiv. Koj yuav xav tau VPN yog tias koj tsis xav kom tsoomfwv hauv nroog lossis Chaw Pabcuam Hauv Is Taws Nem pom cov vev xaib uas koj mus saib.

Nco ntsoov, VPNs qeeb kev sib txuas ceev. Lawv tuaj yeem cuam tshuam nrog cov kev pabcuam thiab cov vev xaib uas tsis nyiam tus neeg sawv cev, thiab qhov no yuav ua rau koj tus lej raug chij.

VPN Resources


Digital Hero

Thaum koj teeb tsa cov nyiaj digital, lawv yuav nug cov ntaub ntawv ntiag tug xws li npe, chaw nyob, xov tooj, cov ntaub ntawv credit card, thiab lwm yam.

Txhawm rau ntxiv ib txheej ntxiv ntawm kev ruaj ntseg, xav txog kev nrhiav neeg ua haujlwm a Digital Hero rau koj pab neeg. Lub Digital Hero tuaj yeem pab dawb rau lawv tus kheej los teeb tsa cov nyiaj digital.

Lub Digital Hero sawv cev rau ib qho chaw raug cai xws li kev lag luam, tsis muaj txiaj ntsig lossis lub koom haum los teeb tsa Meta Lag Luam Account nyob rau hauv lub npe ntawm cov neeg raug cai. Meta yog lub tuam txhab niam txiv ntawm Facebook thiab Instagram.

Lawv yog ib tug neeg tsis nyob hauv lub tebchaws uas muaj peev xwm tiv thaiv txoj haujlwm los ntawm kev hem kev nyab xeeb hauv cheeb tsam (xws li hackers, pawg neeg phem lossis tsoomfwv, thiab lwm yam).


Encrypted Hard Drives

Zoo li VPNs thiab Digital Heros, muaj tag nrho-encrypted hard drives yog kev tswj hwm kev pheej hmoo zoo tshaj plaws rau thaj chaw muaj kev pheej hmoo siab.

Nco ntsoov kom nkag siab tag nrho cov hard drives ntawm tag nrho koj cov khoom siv (ie, laptop, desktop, ntsiav tshuaj, sab nraud hard drive, xov tooj ntawm tes)


iPhones thiab iPads

Tsuav koj muaj ib tug passcode teem rau koj ntaus ntawv iOS no, nws yog encrypted.


laptops

Leej twg muaj lub cev nkag mus rau koj lub computer tsis xav tau koj tus password kom pom cov ntaub ntawv. Lawv tuaj yeem tshem tawm lub hard drive thiab ntxig rau hauv lwm lub tshuab los nyeem cov ntaub ntawv. Tib yam uas tuaj yeem txwv qhov no los ntawm kev ua haujlwm yog tag nrho-disk encryption. Tsis txhob hnov ​​​​qab koj tus password, vim tias koj tsis tuaj yeem nyeem lub disk tsis muaj nws.


OS X 10.11+

Kev Tswj Xyuas Kev Nyab Xeeb: Txheeb xyuas OS FireVault

1. Nyem rau Apple zaub mov, thiab tom qab ntawd System Preferences.

2. Nyem Security & Privacy.

3. Qhib FileVault tab.

4. FileVault yog lub npe ntawm OS X's full-disk encryption feature, thiab nws yuav tsum tau qhib.


Qhov rai 10:

Cov tshiab Windows 10 laptops cia li muaj tag nrho-disk encryption enabled yog tias koj kos npe nrog Microsoft account.

Txhawm rau txheeb xyuas tias tag nrho-disk encryption tau qhib:

1. Qhib lub chaw app

2. Nkag mus rau Qhov System> Txog

3. Saib rau "Device Encryption" chaw nyob hauv qab ntawm lub vaj huam sib luag.

Nco tseg: Yog tias koj tsis muaj ib ntu hu ua "Device Encryption," ces nrhiav qhov chaw hu ua "BitLocker Settings."

4. Nyem rau ntawm nws, thiab xyuas tias txhua lub tsav tau cim "BitLocker rau."

5. Yog tias koj nyem rau ntawm nws thiab tsis muaj dab tsi tshwm sim, koj tsis muaj encryption enabled, thiab koj yuav tsum tau qhib nws.

Risk Management: Windows 10 encryption check


Sab Nraud Tsav Tawm

Yog tias koj poob koj lub hard disk sab nraud, leej twg tuaj yeem nqa thiab nyeem nws cov ntsiab lus. Qhov tsuas yog qhov uas tuaj yeem txwv tsis pub qhov no tshwm sim yog tag nrho-disk encryption. Qhov no siv tau rau USB sticks ib yam nkaus, thiab txhua yam khoom siv cia. Tsis txhob hnov ​​​​qab koj tus password, vim tias koj tsis tuaj yeem nyeem lub disk tsis muaj nws.

OS X 10.11+

Qhib Finder, right-click on the drive, thiab xaiv "Get Info." Cov kab cim "Format" yuav tsum hais tias "encrypted," zoo li hauv daim duab no:

Qhov rai 10:

Encrypting sab nraud drives tsuas yog muaj nrog BitLocker, ib qho tshwj xeeb uas tsuas yog suav nrog Windows 10 Professional lossis zoo dua. Txhawm rau txheeb xyuas tias koj lub disk sab nraud yog encrypted, nias lub Windows key, ntaus "BitLocker Drive Encryption" thiab qhib "BitLocker Drive Encryption" app. Sab nraud hard disk yuav tsum tau cim nrog cov lus "BitLocker on." Nov yog ib qho screenshot ntawm ib tug neeg uas tseem tsis tau encrypted C: muab faib:


Cov ntaub ntawv Pruning

Tshem tawm Cov Ntaub Ntawv Qub

Nws yog qhov zoo kom tshem tawm cov ntaub ntawv tsis tsim nyog uas tsis muaj txiaj ntsig lossis tas sij hawm. Qhov no tuaj yeem yog cov thaub qab qub lossis cov ntaub ntawv lossis cov ntawv xov xwm yav dhau los tau khaws cia hauv Mailchimp.

Risk Management: Rho tawm cov ntaub ntawv qub

Google Koj tus kheej

Google koj lub npe thiab email chaw nyob yam tsawg kawg ib hlis.

  • Yog tias koj pom ib yam dab tsi uas tuaj yeem cuam tshuam koj txoj kev nyab xeeb, tam sim ntawd nug leej twg muab cov ntaub ntawv hauv online tshem tawm.
  • Tom qab nws raug rho tawm lossis hloov pauv kom tshem koj tus kheej, tshem nws los ntawm Google lub cache

Tighten Security ntawm Social Media Accounts

Txawm hais tias nws yog tus kheej lossis kev ua haujlwm ntsig txog, mus dhau qhov chaw ruaj ntseg ntawm koj tus account social media. Nco ntsoov tias koj tsis muaj kev cuam tshuam cov posts lossis duab. Puas yog nws teem rau tus kheej? Xyuas kom tseeb tias cov neeg thib peb apps tsis muaj kev nkag tau ntau dua li qhov lawv yuav tsum tau ua.


Compartmentalize ua hauj lwm thiab tus kheej ib puag ncig

Qhov no tej zaum yog qhov nyuaj tshaj plaws los siv rau feem ntau. Txawm li cas los xij, yog tias koj ua txij thaum pib, nws yuav yooj yim dua.

Siv cais browsers rau kev ua haujlwm thiab tus kheej lub neej. Nyob rau hauv cov browsers no, siv tus password tus thawj tswj hwm tus account. Li no, koj lub vev xaib tshawb nrhiav keeb kwm, thiab bookmarks raug cais.

Tsim ib qho Kev Ntsuam Xyuas Kev Nyab Xeeb thiab Kev Npaj Kho Mob

Thaum ua haujlwm hauv thaj chaw muaj kev pheej hmoo siab, cov ntaub ntawv Kev Ntsuam Xyuas Risk and Contingency Planning (RACP) yog tsim los pab koj txheeb xyuas cov kev hem thawj uas yuav tshwm sim hauv koj lub ntsiab lus M2DMM thiab tsim ib qho kev npaj teb tsim nyog yog tias lawv tshwm sim.

Koj tuaj yeem pom zoo ua ib pab neeg koj yuav qhia li cas txog koj txoj kev koom tes nrog kev ua haujlwm, koj yuav sib txuas lus hauv hluav taws xob li cas thiab cov lus qhia rau pab pawg ntseeg.

Thov Vajtswv sau cov kev hem thawj uas yuav tshwm sim, theem kev pheej hmoo ntawm kev hem thawj, tripwires thiab yuav tiv thaiv lossis tiv thaiv li cas.

Teem sijhawm Kev Tshawb Fawb Kev Ruaj Ntseg Dua

Ib qho lus pom zoo kawg yog tias koj pab pawg M2DMM xav txog kev teem sijhawm rov tshawb xyuas kev ruaj ntseg. Siv cov kev coj ua zoo tshaj plaws no nrog rau cov uas koj tau kawm tom qab ua qhov kev ntsuam xyuas kev pheej hmoo thiab kev npaj. Xyuas kom txhua tus neeg ua tiav daim ntawv txheeb xyuas kom muaj kev ruaj ntseg zoo.


Siv Kingdom.Training's Risk Management Audit Checklist

Cia ib saib