Cybersecurity Tips – September 2021

This month’s cybersecurity tips on safeguarding your email from being compromised, is the second in our series.  As previously stated, although our current focus is on Business emails, individuals can also find these tips helpful.

• • • Operational Controls –
      • Internal and operational controls:
        • Utilize dual control and separation of duties for payment transaction processing and accounting tasks.
        • Verify Payment data and information via phone call to the telephone number in your records, especially if it involves a last-minute change notification via email.
          • Always verify before sending money.
        • Verify payment isn’t a duplication and is going to a different address or account.
        • Use confidential and tamper-resistant mailing procedures for sensitive material.

• • • Assess areas of greatest vulnerabilities for risks and finds ways to mitigate the risks.

• • • • Regularly balance accounts and preform audits of transactions.
      • Visit with a professional about Cybersecurity Insurance coverage.
    • Training and Awareness –
      • Perform regular and new hire fraud training.
      • Provide employees and customers with fraud/security awareness training material.
        • Check email addresses for slight changes.
        • Don’t open emails or links from unknown parties.
        • Avoid free web-based email accounts.
        • Be suspicious of emails urging secrecy and expedience.
    • Recovering the Funds
      • Notify Insurance carrier.
      • Contact bank.
        • To help stop additional fraud.
        • To start process to attempt to see if fraudulent wire(s) is recallable.
      • Document actions related to the incident as they occur for evidentiary purposes, and then file a report with law enforcement.
      • Identify fraud counterpart and notify them of the fraud.
      • Monitor and follow-up.
    • Incident Reporting
      • Notify law enforcement.
      • File a complaint with your local FBI or USSS Field office or file a complaint online at the Internet Crime Complaint Center at www.IC3.gov