Cybersecurity Best Practices

Online safety tips and guidance for the general public and for state employees at work.

Cybersecurity information for the public

Protect yourself at home

Home networks have become increasingly easy to set up, but that can make people overconfident in their network security.

Even if you have a professional put your home network in place, you should still verify that router, encryption, and other settings are appropriate for your household situation.

• It all starts with your wireless router
• Don't forget about your devices
• Regularly back up your files
• Other considerations
• Reach out to your internet service provider (ISP) with questions

Learn how to secure your home network 

Two-factor authentication Protect yourself online using something you have and something you know

Personal security

Managing your online privacy begins with the basics of regularly reviewing your privacy settings on phones, computers, and other networked devices.

This includes creating — and updating — strong passwords on your devices and using two-factor authentication (also known as multi-factor authentication) based on something you have (like a cellphone) and something you know (like a password) to ensure your online security.

Keeping educated on the latest online scams can help you avoid having your private information — or that of your family or employer — fall into the wrong hands. Hackers are always on the lookout for the next opportunity to exploit online mistakes like during the COVID-19 pandemic.

Manage your privacy  Create strong passwords  Stay aware of short message service (SMS)/text phishing scams  Dealing with cyberbullies  Privacy and mobile device apps 

 

Identity theft

Regardless of how careful you are online, it's possible for anyone to fall victim to an online attack.

If you know or fear your identity has been compromised or stolen online, there are steps you can take to minimize damage, especially if you act sooner than later.

Don’t give out personal information on the phone or over the internet unless you are sure you know who you are dealing with.

Avoiding identity theft  Recovering from identity theft  Avoiding ransomware infections 

Cybersecurity information for state employees

Commonwealth employees are required to take annual cybersecurity training courses, and are encouraged to seek out additional training.

With the shift by many agencies to remote or hybrid work environments, employees must take additional precautions online with their work devices and home networks. Learn about the steps you can take to protect yourself on Microsoft Teams, Zoom, and other common collaboration tools.

Telework security fundamentals  Virtual meeting safety  How to report a phishing email 

Cybersecurity news, alerts, and awareness bulletins

Stay informed about time-sensitive industry and government cybersecurity alerts affecting the networks, software, hardware, and services you use. Learn about the latest cybersecurity news and events from trusted sources.

Cybersecurity awareness bulletins  Microsoft alerts  Apple alerts  Google alerts