Security Awareness

Security awareness is the level of understanding users have about cybersecurity risks, best practices, and the actions they should take to protect sensitive information and systems.

Importance of Security Awareness

Security awareness helps employees recognize threats such as phishing, malware, and social engineering. It also reinforces safe behaviors, including strong password use, secure network habits, careful data sharing, and timely incident reporting.

The goal is to help individuals make informed decisions and adopt security-conscious behavior that reduces organizational cybersecurity risk.

Common Threat Vectors

Area	What users should understand
Password security	Create strong passwords, use password managers, and avoid password sharing.
Social engineering	Attackers may manipulate people into revealing confidential information or taking malicious actions.
Malware	Viruses, ransomware, and other malware can spread through downloads, attachments, or unsafe links.
Phishing emails	Suspicious links and unknown attachments can lead to credential theft or malware infection.
Mobile device threats	Mobile devices need secure settings, trusted apps, and protected connections.
Unsafe social media sharing	Public posts can reveal sensitive company information.

Best Practices for Portal Users

• Use multi-factor authentication where available.
• Keep software and systems updated.
• Handle sensitive data responsibly, including storage, sharing, and disposal.
• Lock workstations and secure laptops.
• Use safe Wi-Fi practices and secure remote-work environments.
• Share files through secure, approved methods.
• Follow access control procedures for restricted areas and systems.

Reporting Suspicious Activity

Report suspected incidents promptly so the organization can respond effectively to potential threats.

Examples include:

• Suspicious emails or links.
• Unexpected MFA prompts.
• Unusual account activity.
• Lost or stolen devices.
• Unauthorized physical access.