10 Do’s and Don’ts For Good Cyber Hygiene

In this blog, we’ll look at a number of common habits that you may have fallen into over the last year and review the kind of impact they may have had on your organization's cybersecurity. In particular, we’ll be looking at common pitfalls and best practices around cyber hygiene to understand where there may be scope for improvement over the next year.

Download '10 Do’s and Don’ts For Good Cyber Hygiene' Infographic ➤

What is Cyber Hygiene?

If you aren’t familiar, ‘cyber hygiene’ refers to common practices and steps that individuals can take when using their computers and other devices to minimize cyber security risk.

These practices cover the ways that people commonly use their devices on a daily basis, particularly practices that can seem harmless – such as what they do with their device when it’s unattended or which wireless networks they connect it to.

By being more aware of their cyber hygiene, and understanding what they should be doing to maximize it, individuals can greatly improve the overall cyber security of their organization.

What is Cyber Hygiene Best Practice?

Here are ten ways in which you can improve your cyber hygiene:

1. Using the VPN (Virtual Private Network) provided by your organization when working remotely.
2. Checking with IT if you need to travel with your work laptop.
3. Locking or logging off from your devices when they are not in use.
4. Being aware of who can see sensitive information on your device.
5. Only connecting your work devices to trusted home networks.
6. Reporting suspected incidents, breaches, or disclosures to your IT or IS manager.
7. Contacting your security team before sharing sensitive data.
8. Following your organization's cyber security policies and procedures.
9. Only using approved company software on company devices.
10. Keeping your passwords long and unique to each system.

What Are Common Cyber Hygiene Pitfalls?

Here are ten common mistakes people make when it comes to their cyber hygiene:

1. Using work devices for personal purposes without authorization
2. Using personal devices for work purposes without authorization
3. Leaving confidential information unattended
4. Using public WiFi on your work devices
5. Using unauthorized devices to connect to trusted networks
6. Using personal cloud storage on work devices (e.g. DropBox, BOX, OneDrive and iCloud) without authorization
7. Sharing cardholder data in any form (excluding valid exceptions that have been reported to infosec)
8. Changing or jailbreaking work devices
9. Downloading unapproved software to your work devices
10. Sharing or reusing your passwords.

Download '10 Do’s and Don’ts For Good Cyber Hygiene' Infographic ➤