Embracing Cybersecurity: A Guide for New Zealand’s Cybersecurity Week
As New Zealanders come together to celebrate Cybersecurity Week, it’s an opportune time to reflect on the importance of online safety in our increasingly digital world. From individuals to businesses, the need for robust cybersecurity practices has never been greater. This blog explores key themes of cybersecurity and practical tips for enhancing your online security.
What is Cyber Smart Week?
Cyber Smart Week is an annual event, raising the importance of being secure online and encouraging New Zealanders to take preventative action. Originally started by CERT NZ last year, it is now run by Own Your Online and backed by the government’s National Cyber Security Centre. The week features various activities, resources, and educational materials aimed at helping individuals, families, and businesses improve their cybersecurity practices. It often includes workshops, webinars, and community events that cover topics like protecting personal information, recognizing cyber threats, and safe online behaviours. The initiative aims to empower New Zealanders to be more cyber-savvy and resilient in the face of online risks.
This year the theme is “Stop the Scamathon”, a campaign playing on the ideas of telethons from the 70s and 80s. The campaign encourages people not to ‘donate’ to cyber criminals by making sure their online accounts are secure through long, unique passwords and two-factor authentication. If you want to know more about The Scamathon, visit https://www.ownyouronline.govt.nz/our-campaigns/scamathon/
Understanding the Cyber Threat Landscape
Cyber threats are constantly evolving. Recent reports highlight an increase in phishing attacks, ransomware incidents, and data breaches. These threats not only compromise personal information but can also cripple businesses and disrupt essential services. Around half of New Zealanders and 36% of small to medium businesses have experienced an online security incident in the last six months. Because of this, New Zealanders are losing more than $198 million to scams and fraud every year. But it’s not just the financial loss that is impacted during cyber security incidents. Increased stress, loss of time, impacted business reputation, stolen data or personal information, and loss of confidence with online operations are common issues after a cyber security breach. Research has shown that the emotional impact of cybercrime can be more impactful on the individual experiencing it than the financial impact. Additionally, if a client, friend, or family member’s information also gets taken in a cyber breach, cyber criminals may then move their attacks to them with the information they stole from you. Cybersecurity Week is a reminder that we all have a role to play in protecting ourselves and our communities from cyber threats.
If you would like to check if your email or password has been compromised in an online breach, you can visit www.haveibeenpwned.com.
Key Cybersecurity Practices
So, what can you do as an individual or business to increase your cybersecurity?
First use long, strong, unique passwords for different accounts, incorporating a mix of letters, numbers, and symbols also increases the security level. Around 30% of New Zealanders have admitted to not using strong passwords on their main accounts. Long passwords equal strong passwords. Your passwords should consist of at least 16 characters for it to be strong enough. If you are making your password long, you don’t need to make it complex with lots of symbols and numbers. You can even use a passphrase of four or more random words to create your password, like BananaDustyKayakPossibility. Just remember not to use personal information in your password, such as your birthdate or birthplace, children’s names, or childhood pets. You should also not be using the same passwords on multiple accounts. The reason for this is that passwords are sometimes exposed in data breaches, if a cybercriminal gets hold of your password for something low value like a loyalty card but if you use the same password for your email or banking, then they can get into those easily. Around 43% of New Zealanders use the same passwords across their main accounts, making hacking important accounts just a little easier. Additionally, because multiple 16-character passwords can be difficult to remember, consider using a password manager to help keep track of them. Password managers, such as LastPass, Bitwarden, and 1Password, allow you to securely store multiple passwords in one place so you only need to remember one password.
Around a third of New Zealanders are not using Two-Factor Authentication or 2FA on their main accounts. 2FA adds an extra layer of security by requiring a second form of verification, such as a text message or an authentication app. This makes it much harder for unauthorized users to gain access to your important online accounts. If you have 2FA on an account, even if your password is compromised, a hacker would still need the second factor to access your account, significantly reducing the risk of unauthorized access. Therefore, implementing 2FA is a simple yet effective way to bolster your online security. The National Cyber Security Centre recommends the use of a security key or authentication app over SMS or email methods. This is because if your email has been breached, the hacker can then easily access your 2FA code. However, any 2FA is better than no 2FA. 2FA is crucial for online security, so enable it wherever possible.
A few final key elements to keep on top of: One, remember to regularly update your software. Keeping your software, operating systems, and applications up to date helps protect against vulnerabilities that cybercriminals might exploit. Two, stay informed about the latest cyber threats. Participating in workshops, webinars, and community events can enhance your knowledge and preparedness. Three, secure your Wi-Fi, change the default passwords on your routers and ensure your network is encrypted. Avoid using public Wi-Fi for sensitive transactions unless you’re using a VPN. Four, set your social media settings to private. This way you can control who sees what information you have shared, protecting not only yourself but your friends and family as well. Five, engage the younger generation. As technology becomes increasingly integrated into daily life, it’s vital to educate the younger generation about cybersecurity. Engaging young people in discussions about cybersecurity helps build a more secure future. And finally, think before you click. Be careful when clicking attachments or links in texts, emails, and social media. If it looks suspicious, double-check. If your bank texts you a link to follow, it is likely not your bank (most banks won’t send you a link in a text). If the person on the other side of the phone call asks you to give them access to your computer or asks for unusual personal information, they may not be who they say they are. If in doubt, contact the source directly (for example, if you receive a call from your ‘bank’ that seems suspicious, hang up and call the bank directly).
By adopting good practices, we can create a safer digital environment for everyone in New Zealand. As you participate in Cybersecurity Week activities, remember: your online safety starts with you. Change one password a day this cyber security week to a long, strong password and put your important online accounts on 2FA. Let’s take proactive steps together to build a resilient cyber ecosystem in Aotearoa. Stay safe, stay informed, and enjoy the week!
