GV

C S

HR

MJu

ne 1

7, 2015 Ben WoelkProgram Manager

Information Security Office

RIT

Staying Safe Online for HR Professionals”

Introduction

Awareness is the key

Everyone is a target

Organized crime funds the attacks

Threat Landscape—What’s Being Stolen

Thre

at

Landsc

ape

Valu

e o

f In

form

ati

on

Thre

at

Landsc

ape

Bro

wse

r Vuln

era

bili

ties

Thre

at

Landsc

ape S

oci

al

Media

Thre

at

Landsc

ape

Mobile

Vuln

era

bili

ties

Thre

at

Landsc

ape

Ranso

mw

are

Solu

tions

Creating and using strong passwords, aka passphrases

Length > complexity

TIP #1 It was a dark and

stormy night

becomes

ItwasaDark215andStormyNight

Pass

word

s

https://www.grc.com/haystack.htm

Pass

word

Safe

s

Keep Your Software (and Hardware up to date!

TIP #2

Layers of

security

Anti-virus

Firewall

Don’t overlook

mobile devices!

TIP #3Use protection

Recognize phishing & scams

TIP #4

Use social networks

safely

Don’t post schedules or whereabouts

TIP #5

Phishing on social networkingsites

Remember who else

is there• Employers

• Identity thieves

• Online predators

TIP #6

Don’t post inappropriate photos!

What you

post can be

used to…

* Judge

* Impersonate

* Monitor

Be wary of others

Is this really your friend..?

TIP #7

TIP #8

Monitor use of your name

Guard your personal

information

Watch out for Facebook applications!

TIP #9

Never assume privacy

Do you care if Facebook

captures where you’ve been?

TIP #10

Cool T

ools

Google DashboardBrowser Plugins NoScript McAfee Site Advisor Web of Trust (WoT)

Secunia PSIPassword Safes

Reso

urc

es

Goodreads Cyber Security Library

https://www.goodreads.com/

search?q=cyber+security+li

brary Infosec Communicator

Blogbenwoelk.com Shockproofing Your Use

of Social Media eBook

http://amzn.com/B00OJMK4T2

ISTR20 Internet Security Threat

Report. April 2015, Symantec

http://www.symantec.com/security_resp

onse/publications/threatreport.jsp

Questions (and maybe some answers)

Ben Woelk

Ben.woelk@gmail.com

Benwoelk.com

@benwoelk

www.linkedin.com/in/benwoelk/