Safety is the first Requirement of a Company

PC protection is a very important component of cybersecurity. Unfortunately, not everyone understands the importance of a systematic approach in building such protection. For the second decade in a row, global corporations have been training their employees in the skills of secure handling of information, recognition and correct actions during cybersecurity incidents. An analogue of such training is fire safety training – how to prevent and what to do in case of Cyberattack. The time has come when such Cyber security course in Dubai training should be conducted not only for employees of large companies, but also for the entire population.

Our dependence on information technology is becoming critical and continues to grow. Attacks progress at such a rate that it is pointless to rely on protection only by technical means (such as anti-virus programs). The number of attacks on people or through people increases, when by misleading a person, attackers takes control of his computer, phone, and find out passwords or credit card numbers.

What could be the consequences of such attacks?

Theft of money from a bank account, personal information, encryption by attackers of the victim’s computer, extortion, etc. For example, stealing money from a bank through an intercepted phone or spreading private information on social networks and blackmail. Often, attackers from a compromised personal device gain access to valuable corporate information and systems in the organization where the person works.

How does this happen?

The person receives a letter by e-mail, which looks quite legitimate and seems to be sent by an acquaintance, employee, or organization that the person trusts (for example, a bank). The letter encourages the person to open the attachment, follow the link, or enter their password to a seemingly legitimate site.

Once a person opens an attachment or follows a link – his computer or mobile device is infected, and when he is controlled by attackers.  Another type of attack is when a person receives an SMS or a call with a message that they have won something: all you have to do is follow the link or provide the credit card number. These types of attacks, which are aimed at gaining access to systems and information by misleading people, are called social engineering. Email attacks are “phishing” and SMS attacks are “phishing”. In addition to phishing, there are many types of attacks on computers and mobile devices that can be prevented by following basic security rules.

What skills do you need to teach?

In addition to combating social engineering and related fraud, people need to be provided with basic skills on such topics as setting up a mobile phone and WI-FI in a public place, recognizing unsafe sites, setting up a safe Internet and connected devices. Protection of children on the Internet, the use of secure passwords, etc.

What should be the next steps?

The first step should be to develop a program structure that will answer the questions of what skills are needed and what channels and teaching methods to use for different “profiles” of citizens.

The company owners must decide how to move in this direction – to create content and learning platforms on their own or save time and buy a finished product. In my opinion, time cannot be wasted. After all, training in cybersecurity such as CCNA course in Dubai is just as – or even more important – than building technical means of protection or response centers