Establishing a Cybersecurity Foundation with the The Core Four

To establish a Cybersecurity Foundation, you must establish and implement the "Core Four" cybersecurity behaviors. By establishing these behaviors and habits it creates a strong foundation for protecting personal and business digital assets.

The Core Four behaviors of Cybersecurity involves the following:

1. Use Strong, Unique Passwords & Passphrases

What is a strong password? NIST now recommends a unique password that is 15-20+ characters, with 18 characters being a norm. The passwords should use random, unrelated words or a mix of characters, symbols, and numbers. What does a potential password look like?

Memorable: Let-Freedom-Ring-2006 - why does this work? It's long, easy to remember, but hard to crack. You can go

Ramdomized (High Security) - K!kZeXTQ=9NWugO#212 (random characters, mixed cases, symbols)

Sentence Method: !2007ThisIsMyPasswordN0w (lyric/sentence with character substitution.

2. Enable Multi-Factor Authentication (MFA)

Activating MFA or 2FA adds an extra layer of protection. Not only do you need to enter your password, but you will need another method to verify it is you such as a code from an SMS Text Message of an Authenticator App.

3. Recognize and Report Phishing

Training on suspiscious emails, links, and messages to top scams and phishing attempts before it results in theft.

4. Safe Handling of Company Data

Know where your company data is stored, how it's accessed, and how you share it. Only store files on company approved storage. Avoid using personal devices too access company information. Make sure sentitive data is secured.

By implementing these "Core Four" behaviors, you can reduce your risks of an attack and data loss. These are four simple things that can be implemented easily.