Business Email Compromise (BEC) is one of the leading cyber threats today so it's important to know that there are many valuable tips for keeping your business email secure.
For example, using strong passwords, security awareness training for your employees, avoiding public Wi-Fi, and utilizing effective antivirus software. Here are some additional tips that can add an extra layer of security for your organization.
Here are 5 Tips to Prevent Business Email Compromise (BEC):
- Enable MFA: Many people use the same password across multiple log-ins. Multi-factor authentication prompts a user for an additional form of identification upon sign-in such as a numerical code sent via text. Even if a hacker has your email and password, they would need access to this code in order to log in.
- Monitor the Dark Web to make sure your or your employee's credentials aren't being sold on the Dark Web. Why hack someone's email if you can buy credentials online for a few pennies. Too many of us use the same passwords for multiple systems. How many of your employees use their network login for online websites and services? Of the regular hacks and stolen information in the cloud, what is the odds that someone at your business has their current password stolen and for sale on the Dark Web?
- Disable automatic forwarding to external email addresses: This could be a big security risk. Let’s say a hacker has an employee’s email and password. They log into Office 365 and set up the forward function to send all these emails to their personal gmail account. Yikes!! Think about the implications this could have with HIPAA laws or regulatory compliance not to mention data privacy.
- Backup Microsoft Office 365 and G Suite: Office 365 and G Suite do not provide protection against data loss due to hackers, ransomware, malware, malicious insiders or departing employees. An attacker may attempt to gain administrative access to your Office 365 account via phishing and hold your data hostage. Make sure you have proper backups of your email to prevent data loss.
- Disable International logins: Another way to improve email security is to block logins from other countries. Hackers are global. At minimum block all countries except those that you do business with or have business travel to/from.
Everyone uses email for internal and external communication. It’s also an effective entry for hackers to access your domain, commonly via phishing attacks. Keep your email safe!
Teknologize has clients throughout the Pacific Northwest with offices located in the Tri-Cities, Washington 509.396.6640 and Bend, Oregon 541.848.6072.
