Skip links

Cyber Security Awareness month: A recap of the Do’s

Cybersecurity Awareness Month: A Recap of

The Do’s

The aim of cybersecurity awareness month is to enlighten the general public on how to stay safe online or when interacting with a digital device. This article seeks to give an overview of requirement needed to stay protected on internet as highlighted by CISA (Cybersecurity and Infrastructure Security Agency) as co-led by NCA(National Cybersecurity Alliance) for the 2022 cybersecurity awareness month.

cybersecurity awareness month recap

The theme for 2022 is coined as  #SeeYourselfInCyber, which basically is advising every individual and organisation to be responsible for keeping themselves as well as there infrastructure safe while in the cyberspace or using any device that has access to internet

Below are the four points highlighted during the cyber security awareness month campaign.

Enable Multi-Factor Authentication

Multi-factor authentication, frequently referred to as MFA, is also known as two-factor authentication or two-step verification. MFA is a security feature for an account (on social media or a banking application), Digital assets (e.g., wallets) that require many kinds of identity verification from a user before granting access.

The idea behind MFA is that the data or channel that the data passes through has to be personal (for example, an SMS to your personal phone or email) a security question such as “What is the name of your favourite food”. You typically enter your login information and password before proving your identity in another way, such as a fingerprint scan or an SMS with random characters or a string as well as submitting an answer to a security question. Receiving mail or messages containing random numbers or alphanumeric characters that must be entered into a box is the most common and widely utilised method.

 It’s important to note that applications with MFA in place have been breached either due to a mistake in writing of the code or a bad business logic vulnerability, 2FA authentication does not provide 100% security (there is no such thing as 100% security). However, when MFA is combined with other security measures,such as a very strong or complex password among others, it does make it twice as difficult for the adversary to breach your account or digital profile.

Passwords and Password Managers

Passwords can be likened to an individual’s access key to his or her digital castle. 

For almost everyone that uses the internet, creating, storing, and remembering passwords may be a hassle. However, passwords are really your first line of protection against hackers and data breaches. Additionally, free, user-friendly password managers make managing your passwords simpler than ever.

Regardless of what a password is protecting, it is recommended that the password is unique, complex and long.

Unique: A password should be unique to its creator, such as that it’s easy to remember but hard for anyone else to guess. 

Complex: A complex password should be a combination of three among the following, An uppercase letters, lowercase letters, numbers, special characters. 

Long: A password is considered long when it has at least 12 characters, this makes it difficult to guess

Password managers take away the need to remember every unique password created, once you create your portfolio on any platform it’s saved immediately with your password manager, it also makes it easy to login when needed. 

Some examples of password managers include Lastpass, 1Password, Nordpass e.t.c.

Updating Software

While adhering to all the recommendations above it’s important to take care of the application within your system. This is because they serve as an attack vector when they happen to have a loophole within them which the vendor may have discovered and fixed. If you don’t apply these fixes, you become exposed to malware and viruses sometimes tailored towards those applications. 

It’s best to make software updates automatic (If the option is available) as this ensures you are getting it from the right source. If automatic update is not available, ensure you are downloading from the right source and avoid cracked and pirated copies of software as this is the quickest way your system can get compromised,  this is because this type of application can be embedded with malware’s.

Recognizing Phishing: Watch Out for Baits

Phishing is the practice of cyber criminals using phony emails, social media postings, or direct messages to get you to click on a dangerous link or download a harmful attachment. You can end up providing your confidential information to online thieves by clicking on a misleading link or file. Additionally, a phishing scam might infect your device with malware.

The Bait

The bait used during a phishing campaign by criminals, especially inexperienced ones, are usually shiny and too good to be true, this could be in the form of an email message, a text message notification saying you’ve won a large sum of money or an expensive device(e.g Iphone). You are now required to click on a link to claim you win. This link potentially harvests your personal information and credentials or worse, infect your device with malware.

The best action to take when you receive a phishing mail is to firstly block the email sender’s address and delete such message. One should never click on links or download attachments from a suspected phishing mail, in the case of an organization, the IT department should be notified of this type of email so that necessary measures can be taken.

These are some of the activities that ensure an individual or organization is, to a large extent, secured from the various dangers that come with interacting with the internet.

Thanks for reading

Follow us on LinkedIn, Twitter, and Facebook to get our daily updates.

This website uses cookies to improve your web experience.
On-Site Certified Cryptocurrency Investigator (CCI) Training

Learn how cryptocurrency related transactions, crimes are tracked, traced and prosecuted.



Certified Cryptocurrency Investigator Virtual Training

Learn how cryptocurrency related transactions, crimes are tracked, traced and prosecuted.


(ON-SITE) CERTIFIED CRYPTOCURRENCY COMPLIANCE SPECIALIST(3CS) COURSE

Learn how compliance could be a competitive advantage to your exchanges with all your AML, CTF, KYC and OFAC requirements.

By becoming an early bird for each cohort or leveraging our partner firms, you can obtain up to a 25% discount, contact us for more details.


Smart Contract Audit

To speak to us regarding Smart Contract Audit, please fill the form below. We will make every attempt to respond to you as soon as possible

Call Direct: +2348036180089 | +2349095503040

Get in touch

To speak with us as regards our services, to make comments and ask questions, please fill the form below. We will reply as soon as possible.

Call Direct: +2348036180089 | +2349095503040

LEAD FACILITATOR – CRYPTOCURRENCY INTUITION

Chioma Onyekelu is a highly skilled and accomplished professional in the field of cryptocurrency and blockchain technology. She is a Certified Cryptocurrency Investigator and Crypto Compliance Specialist, as well as a Blockchain Forensic Specialist and a teacher. She is also a public speaker and her teachings include consultations and practical solutions for African Start-ups on the best and most cost-effective way to build with compliance in mind. With a wealth of knowledge and experience in these cutting-edge technologies, she is well-equipped to navigate the complex landscape of cryptocurrency-related crimes.

In her current role as a Blockchain Forensic Specialist at A&D Forensics, Chioma is responsible for tracing and investigating cryptocurrency-related crimes, as well as training law enforcement agents and compliance officers on the latest developments and best practices in the field. In addition, she is currently pursuing a Master's degree in Blockchain and Digital Currencies at the University of Nicosia in Cyprus, further solidifying her expertise and understanding of the technology.

Chioma's dedication and passion for the field is evident in her work, and she is committed to staying at the forefront of developments in cryptocurrency and blockchain technology to provide the best possible service to her clients. Her exceptional skills in educating and consulting make her a valuable asset to the industry and an authority in the field of Blockchain and Crypto Compliance.

LEAD FACILITATOR – CRYPTOCURRENCY INVESTIGATIONS

Adedeji is a Forensic Investigation Practitioner and CertifiedBlockchain/Cryptocurrency Forensic
Investigator (CFE, CCI, CCFI & Reactor Certified) with more than Fifteen years of experience across few banks within the Nigeria Financial Sector and educator in Corporate workplace settings, Deji is uniquely qualified and involved in forensics analysis of Financial Infractions, Cryptocurrency crimes and designing plans that works for Government, Regulators, Law enforcement.

He was appointed by SEC Nigeria as Member Virtual Asset and Fintech Regulatory framework drafting Committee, He is a member of Global Digital Finance’s KYC/AML working group in France and a member of the Industry led Thinktank that worked on and came out with FATF cryptocurrency Travel rule InterMessaging Standard for Virtual Assets (IVMS101) to help combat money laundering and terrorism financing using cryptocurrencies around the globe.

His law enforcement training efforts on new money and cybercrime have seen him train many law enforcement agents in various countries i.e Nigeria Police, Nigeria Army CyberWarfare command, Zambia Financial Intelligence Unit, Zambia Central Bank and more.
He is Chainalysis Sole Africa Investigative Partner helping law enforcement investigate criminal organizations using cryptocurrency to conceal illiccit activities across Africa, he is also a training Partner for Blockchain Intelligence Group based out of Canada.

Cryptocurrency Investigation Training

Learn how cryptocurrency related transactions, crimes are tracked,
traced and prosecuted.