Common misconceptions.
"WE ARE TOO SMALL TO BE TARGETED"
Attacks are automated and indiscriminate.
"WE HAVE ANTIVIRUS, SO WE ARE PROTECTED"
One layer among several, and not the most important.
"OUR DATA IS NOT INTERESTING"
Customer details are useful to attackers regardless of your size.
"WE WOULD NOTICE A COMPROMISE"
Most go unnoticed for weeks.
"THE CLOUD PROVIDER HANDLES SECURITY"
They secure their infrastructure. Your accounts, your data and your access remain yours.
"MY PASSWORD IS STRONG, SO I AM SAFE"
A strong password reused elsewhere is compromised when that service is breached.
"SECURITY IS THE IT PERSON'S JOB"
Most incidents involve a person being deceived, not a technical failure.
"WE CAN FIX IT IF IT HAPPENS"
Recovery without preparation takes days and sometimes fails.
WHAT TO REPLACE THEM WITH
Do the unglamorous basics, consistently.
