{"appState":{"pageLoadApiCallsStatus":true},"authorState":{"author":{"headers":{"timestamp":"2024-11-22T08:49:29+00:00"},"authorId":34698,"data":{"name":"Ira Winkler","slug":"ira-winkler","description":" This All-in-One gathers the expertise of the leading For Dummies authors in the world of cybersecurity, including Joseph Steinberg, author of Cybersecurity For Dummies; Kevin Beaver, author of Hacking For Dummies; Ted Coombs, author of Cloud Security For Dummies; and Ira Winkler, author of Security Awareness For Dummies. ","photo":{"src":null,"width":0,"height":0}}},"authorLoadedStatus":"success"},"listState":{"list":{"count":2,"total":2,"items":[{"headers":{"creationTime":"2023-01-09T22:21:25+00:00","modifiedTime":"2023-01-10T16:45:41+00:00","timestamp":"2023-01-10T18:01:02+00:00"},"data":{"breadcrumbs":[{"name":"Technology","_links":{"self":"https://dummies-api.dummies.com/v2/categories/33512"},"slug":"technology","categoryId":33512},{"name":"Cybersecurity","_links":{"self":"https://dummies-api.dummies.com/v2/categories/33537"},"slug":"cybersecurity","categoryId":33537}],"title":"Cybersecurity All-in-One For Dummies Cheat Sheet","strippedTitle":"cybersecurity all-in-one for dummies cheat sheet","slug":"cybersecurity-all-in-one-for-dummies-cheat-sheet","canonicalUrl":"","seo":{"metaDescription":"This Cheat Sheet includes tips for protecting your personal and work data, a list of password-cracking software professionals, and more.","noIndex":0,"noFollow":0},"content":"To cyber-protect your personal and business data, make sure everyone at home and at work recognizes that they are a target.\r\n\r\nPeople who believe that hackers want to breach their computers and phones and that cyber criminals want to steal their data act differently than people who do not understand the true nature of the threat. Many businesses use security awareness programs to improve security related behaviors.","description":"To cyber-protect your personal and business data, make sure everyone at home and at work recognizes that they are a target.\r\n\r\nPeople who believe that hackers want to breach their computers and phones and that cyber criminals want to steal their data act differently than people who do not understand the true nature of the threat. Many businesses use security awareness programs to improve security related behaviors.","blurb":"","authors":[{"authorId":33198,"name":"Joseph Steinberg","slug":"joseph-steinberg","description":" <p><b>Joseph Steinberg</b> is a master of cybersecurity. He is one of very few people to hold the suite of security certifications including: CISSP<sup>®</sup>, ISSAP<sup>®</sup>, ISSMP<sup>®</sup>, and CSSLP<sup>®</sup>. Joseph has written several books on cybersecurity, including the previous edition of <i>Cybersecurity For Dummies</i>. He is currently a consultant on information security, and serves as an expert witness in related matters.</p> ","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/33198"}},{"authorId":8984,"name":"Kevin Beaver","slug":"kevin-beaver","description":" <p><b>Kevin Beaver </b>is an information security guru and has worked in the industry for more than three decades as a consultant, writer, and speaker. He earned his master’s degree in Management of Technology at Georgia Tech.</b></p> ","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/8984"}},{"authorId":34698,"name":"Ira Winkler","slug":"ira-winkler","description":"","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/34698"}},{"authorId":34680,"name":"Ted Coombs","slug":"ted-coombs","description":" <p><b>Ted Coombs</b> is a direct descendant of King Edward of England, a former world record holder for most miles roller skated in a day, and a longtime technology guru and author. He’s written over a dozen technology books on a wide array of topics ranging from database programming to building an internet site. Along the way he helped create early artificial intelligence tools and served as cybersecurity professional focused on computer forensics. ","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/34680"}}],"primaryCategoryTaxonomy":{"categoryId":33537,"title":"Cybersecurity","slug":"cybersecurity","_links":{"self":"https://dummies-api.dummies.com/v2/categories/33537"}},"secondaryCategoryTaxonomy":{"categoryId":0,"title":null,"slug":null,"_links":null},"tertiaryCategoryTaxonomy":{"categoryId":0,"title":null,"slug":null,"_links":null},"trendingArticles":[{"articleId":172026,"title":"Repurposing Items for Beautiful Holiday Decorating","slug":"decorating-for-the-holidays-with-what-you-already-have","categoryList":["home-auto-hobbies","crafts","gifts-holidays"],"_links":{"self":"/articles/172026"}},{"articleId":192609,"title":"How to Pray the Rosary: A Comprehensive Guide","slug":"how-to-pray-the-rosary","categoryList":["body-mind-spirit","religion-spirituality","christianity","catholicism"],"_links":{"self":"/articles/192609"}},{"articleId":193770,"title":"How to Play Rummy: All You Need to Know","slug":"rummy-understanding-the-rules-and-starting-a-game","categoryList":["home-auto-hobbies","games","card-games","general-card-games"],"_links":{"self":"/articles/193770"}},{"articleId":153792,"title":"Format Numbers in Thousands and Millions in Excel Reports","slug":"format-numbers-in-thousands-and-millions-in-excel-reports","categoryList":["technology","software","microsoft-products","excel"],"_links":{"self":"/articles/153792"}},{"articleId":147241,"title":"How to Use the Z-Table","slug":"how-to-use-the-z-table","categoryList":["academics-the-arts","math","statistics"],"_links":{"self":"/articles/147241"}}],"inThisArticle":[],"relatedArticles":{"fromBook":[],"fromCategory":[{"articleId":291466,"title":"Security Awareness For Dummies Cheat Sheet","slug":"security-awareness-for-dummies-cheat-sheet","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/291466"}},{"articleId":290240,"title":"Cloud Security For Dummies Cheat Sheet","slug":"cloud-security-for-dummies-cheat-sheet","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/290240"}},{"articleId":270968,"title":"How to Perform a Penetration Test","slug":"how-to-perform-a-penetration-test","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/270968"}},{"articleId":270960,"title":"Penetration Testing with Burp Suite and Wireshark to Uncover Vulnerabilities","slug":"penetration-testing-with-burp-suite-and-wireshark-to-uncover-vulnerabilities","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/270960"}},{"articleId":270942,"title":"Building a Penetration Testing Toolkit: Considerations and Popular Pen Test Tools","slug":"building-a-penetration-testing-toolkit-considerations-and-popular-pen-test-tools","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/270942"}}]},"hasRelatedBookFromSearch":false,"relatedBook":{"bookId":296574,"slug":"cybersecurity-all-in-one-for-dummies","isbn":"9781394152858","categoryList":["technology","cybersecurity"],"amazon":{"default":"https://www.amazon.com/gp/product/139415285X/ref=as_li_tl?ie=UTF8&tag=wiley01-20","ca":"https://www.amazon.ca/gp/product/139415285X/ref=as_li_tl?ie=UTF8&tag=wiley01-20","indigo_ca":"http://www.tkqlhce.com/click-9208661-13710633?url=https://www.chapters.indigo.ca/en-ca/books/product/139415285X-item.html&cjsku=978111945484","gb":"https://www.amazon.co.uk/gp/product/139415285X/ref=as_li_tl?ie=UTF8&tag=wiley01-20","de":"https://www.amazon.de/gp/product/139415285X/ref=as_li_tl?ie=UTF8&tag=wiley01-20"},"image":{"src":"https://www.dummies.com/wp-content/uploads/cybersecurity-all-in-one-for-dummies-cover-9781394152858-203x255.jpg","width":203,"height":255},"title":"Cybersecurity All-in-One For Dummies","testBankPinActivationLink":"","bookOutOfPrint":true,"authorsInfo":"<p><p><b><b data-author-id=\"33198\">Joseph Steinberg</b></b> is a master of cybersecurity. He is one of very few people to hold the suite of security certifications including: CISSP<sup>®</sup>, ISSAP<sup>®</sup>, ISSMP<sup>®</sup>, and CSSLP<sup>®</sup>. Joseph has written several books on cybersecurity, including the previous edition of <i>Cybersecurity For Dummies</i>. He is currently a consultant on information security, and serves as an expert witness in related matters.</p> <p><b><b data-author-id=\"8984\">Kevin Beaver</b> </b>is an information security guru and has worked in the industry for more than three decades as a consultant, writer, and speaker. He earned his master’s degree in Management of Technology at Georgia Tech.</b></p> <p><b><b data-author-id=\"34680\">Ted Coombs</b></b> is a direct descendant of King Edward of England, a former world record holder for most miles roller skated in a day, and a longtime technology guru and author. He’s written over a dozen technology books on a wide array of topics ranging from database programming to building an internet site. Along the way he helped create early artificial intelligence tools and served as cybersecurity professional focused on computer forensics.</p>","authors":[{"authorId":33198,"name":"Joseph Steinberg","slug":"joseph-steinberg","description":" <p><b>Joseph Steinberg</b> is a master of cybersecurity. He is one of very few people to hold the suite of security certifications including: CISSP<sup>®</sup>, ISSAP<sup>®</sup>, ISSMP<sup>®</sup>, and CSSLP<sup>®</sup>. Joseph has written several books on cybersecurity, including the previous edition of <i>Cybersecurity For Dummies</i>. He is currently a consultant on information security, and serves as an expert witness in related matters.</p> ","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/33198"}},{"authorId":8984,"name":"Kevin Beaver","slug":"kevin-beaver","description":" <p><b>Kevin Beaver </b>is an information security guru and has worked in the industry for more than three decades as a consultant, writer, and speaker. He earned his master’s degree in Management of Technology at Georgia Tech.</b></p> ","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/8984"}},{"authorId":34698,"name":"Ira Winkler","slug":"ira-winkler","description":"","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/34698"}},{"authorId":34680,"name":"Ted Coombs","slug":"ted-coombs","description":" <p><b>Ted Coombs</b> is a direct descendant of King Edward of England, a former world record holder for most miles roller skated in a day, and a longtime technology guru and author. He’s written over a dozen technology books on a wide array of topics ranging from database programming to building an internet site. Along the way he helped create early artificial intelligence tools and served as cybersecurity professional focused on computer forensics. ","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/34680"}}],"_links":{"self":"https://dummies-api.dummies.com/v2/books/"}},"collections":[],"articleAds":{"footerAd":"<div class=\"du-ad-region row\" id=\"article_page_adhesion_ad\"><div class=\"du-ad-unit col-md-12\" data-slot-id=\"article_page_adhesion_ad\" data-refreshed=\"false\" \r\n data-target = \"[{"key":"cat","values":["technology","cybersecurity"]},{"key":"isbn","values":["9781394152858"]}]\" id=\"du-slot-63bda7decd375\"></div></div>","rightAd":"<div class=\"du-ad-region row\" id=\"article_page_right_ad\"><div class=\"du-ad-unit col-md-12\" data-slot-id=\"article_page_right_ad\" data-refreshed=\"false\" \r\n data-target = \"[{"key":"cat","values":["technology","cybersecurity"]},{"key":"isbn","values":["9781394152858"]}]\" id=\"du-slot-63bda7dece3c7\"></div></div>"},"articleType":{"articleType":"Cheat Sheet","articleList":[{"articleId":0,"title":"","slug":null,"categoryList":[],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/"}}],"content":[{"title":"Protecting your data from Internet scams","thumb":null,"image":null,"content":"<p>The following tips help you protect your data and keep yourself and your family safe from Internet scams:</p>\n<ul>\n<li><strong>Protect your devices.</strong> At a minimum, run security software on every device you use to access sensitive information. Configure your devices to auto-lock, and to require a strong password to unlock them. Don’t leave your devices in insecure locations, and install software only from reputable sources, such as official app stores and official vendor and reseller websites.</li>\n<li><strong>Protect data.</strong> Encrypt all sensitive data and back up often. If you’re unsure as to whether something should be encrypted, it probably should be. If you’re unsure as to whether you back up frequently enough, — you, like most people, probably are not.</li>\n<li><strong>Use safe connections.</strong> Never access sensitive information over free public Wi-Fi and consider avoiding using such Internet access altogether, especially from any device on which you perform sensitive activities or access sensitive information.The connection provided by your cellular service is likely far more secure than any public Wi-Fi, and such connections can usually be shared by multiple devices if you turn on your phone’s “mobile hotspot” feature.</li>\n<li><strong>Use proper authentication and passwords.</strong> Every person accessing an important system should have their own login credentials. Do not share passwords for online banking, email, social media, and so on with your children or significant other. Get everyone their own login. Make sure you use strong, unique passwords for your most sensitive systems.</li>\n<li><strong>Share wisely. </strong>Do not overshare information on social media or using any other platforms. Crooks look for such data and use it to social engineer people. Oversharing exposes yourself and your loved ones to increased risks of being targeted by scammers or of having your identities stolen.</li>\n</ul>\n"},{"title":"Managing cybersecurity in your organization","thumb":null,"image":null,"content":"<p>The following tips can help you communicate effectively about cybersecurity challenges in your organization:</p>\n<ul>\n<li>Treat security awareness and training as a business investment.</li>\n<li>Train users on an ongoing basis to keep security fresh in their minds.</li>\n<li>Include information privacy and security tasks and responsibilities in everyone’s job descriptions.</li>\n<li>Tailor your content to your audience whenever possible.</li>\n<li>Create a social engineering awareness program for your business functions and user roles.</li>\n<li>Keep your messages as nontechnical as possible.</li>\n<li>Develop incentive programs for preventing and reporting incidents.</li>\n<li>Lead by example.</li>\n</ul>\n"},{"title":"Preventing social engineering attacks in the workplace","thumb":null,"image":null,"content":"<p>These tips help prevent social engineering attacks in the workplace:</p>\n<ul>\n<li><strong>Never divulge any information unless you can validate that the people requesting the information need it and are who they say they are.</strong> If a request is made over the telephone, verify the caller’s identity, and call back.</li>\n<li><strong>Never click an email link that supposedly loads a page with information that needs updating.</strong> This is particularly true for unsolicited emails, which can be especially tricky on mobile devices because users often don’t have the benefit of seeing where the link would take them.</li>\n<li><strong>Encourage your users to validate shortened URLs from bit.ly and other URL-shortening services if they’re unsure of their safety or legitimacy.</strong> Websites such as <a href=\"http://www.checkshorturl.com\" target=\"_blank\" rel=\"noopener\">CheckShortURL</a> and <a href=\"http://wheregoes.com\" target=\"_blank\" rel=\"noopener\">WhereGoes</a> offer this service.</li>\n<li><strong>Be careful when sharing sensitive personal information on social networking sites, such as Facebook or LinkedIn.</strong> Also, be on the lookout for people claiming to know you or wanting to be your friend. Their intentions might be malicious.</li>\n<li><strong>Escort all guests within the building.</strong> This may not match your company’s culture or be realistic, but it can certainly help minimize social engineering risks.</li>\n<li><strong>Never open email attachments or other files from strangers, and be very careful even if they come from people you know.</strong> This measure alone could prevent untold security incidents, breaches, and ransomware infections.</li>\n<li><strong>Never give out passwords or other sensitive information.</strong> Even your own colleagues don’t need to know unless there’s an otherwise compelling business reason behind it.</li>\n<li><strong>Never let a stranger connect to one of your Ethernet network ports or internal wireless networks, even for a few seconds.</strong> Someone with ill intent can place a network analyzer or install malware, or set up a backdoor that can be accessed remotely when they leave.</li>\n<li><strong>Develop and enforce media-destruction policies.</strong> These policies (for computer media and documents) help ensure that data is handled carefully and stays where it should be. A good source of information on destruction policies is <a href=\"http://www.pdaconsulting.com/datadp.htm\" target=\"_blank\" rel=\"noopener\">PDAconsulting</a>.</li>\n<li><strong>Use cross-cut paper shredders.</strong> Better still, hire a document-shredding company that specializes in confidential document and media destruction.</li>\n</ul>\n"},{"title":"Sample questions for a security awareness interview","thumb":null,"image":null,"content":"<p>Following, are some general questions you should ask everyone you interview when creating a security awareness program. You also need to ask questions specific to the person’s job function and relationship or the influence they have to their awareness person.</p>\n<ul>\n<li>What are the biggest problems you see?</li>\n<li>What are the security strengths you see?</li>\n<li>Do you have any specific concerns?</li>\n<li>(If someone has been with the organization for a while) What has worked best within the company to change behaviors?</li>\n<li>(If someone is new to the organization) Have you seen anything in your past organizations that you think would work here?</li>\n<li>What have been the parts of the current awareness program that you like?</li>\n<li>What did you not like?</li>\n<li>Do you see other departments communicate well with employees? How do they do that?</li>\n<li>Do you think the organization places importance on security?</li>\n<li>Do you think your line manager expects certain things of you?</li>\n<li>What happens if adhering to security guidelines causes you to take longer to do your job?</li>\n<li>What prevents you from following good awareness practices?</li>\n<li>How do you prefer to receive awareness information?</li>\n<li>What information do you need?</li>\n<li>What information do you want to see?</li>\n<li>Can you offer any guidance to the awareness program?</li>\n</ul>\n"},{"title":"Password-cracking software for security professionals","thumb":null,"image":null,"content":"<p>Password-cracking tools can be used for both legitimate security assessments and malicious attacks. You want to find password weaknesses before the bad guys do.</p>\n<p>You can try to crack your organization’s operating system and application passwords with various password-cracking tools:</p>\n<ul>\n<li><a href=\"https://web.archive.org/web/20190731132754/http:/www.hoobie.net/brutus/\" target=\"_blank\" rel=\"noopener\"><strong>Brutus</strong></a>: Cracks logins for HTTP, FTP, Telnet, and more</li>\n<li><a href=\"https://web.archive.org/web/20160214132154/http://www.oxid.it/cain.html\" target=\"_blank\" rel=\"noopener\"><strong>Cain & Abel</strong></a>: Cracks LM and NT LanManager (NTLM) hashes, Windows RDP passwords, Cisco IOS and PIX hashes, VNC passwords, RADIUS hashes, and lots more. (<em>Hashes</em> are cryptographic representations of passwords.)</li>\n<li><a href=\"https://www.elcomsoft.com/edpr.html\" target=\"_blank\" rel=\"noopener\"><strong>Elcomsoft Distributed Password Recovery</strong></a>: Cracks Windows, Microsoft Office, PGP, Adobe, iTunes, and numerous other passwords in a distributed fashion, using up to 10,000 networked computers at one time. This tool uses the same graphics processing unit (GPU) video acceleration as the Elcomsoft Wireless Auditor tool, which allows for cracking speeds up to 50 times faster.</li>\n<li><a href=\"https://www.elcomsoft.com/ppa.html\" target=\"_blank\" rel=\"noopener\"><strong>Elcomsoft Proactive Password Auditor</strong></a>: Runs brute-force, dictionary, and rainbow cracks against extracted LM and NTLM password hashes.</li>\n<li><a href=\"https://www.elcomsoft.com/pspr.html\" target=\"_blank\" rel=\"noopener\"><strong>Elcomsoft Proactive System Password Recovery</strong></a>: Recovers practically any locally stored Windows passwords, such as login passwords, WEP/WPA passphrases, SYSKEY passwords, and RAS/dial-up/VPN passwords.</li>\n<li><a href=\"https://www.elcomsoft.com/esr.html\" target=\"_blank\" rel=\"noopener\"><strong>Elcomsoft System Recovery</strong></a>: Cracks or resets Windows user passwords, sets administrative rights, and resets password expirations, all from a bootable CD. This tool is great for demonstrating what can happen when laptop computers don’t have full disk encryption.</li>\n<li><a href=\"http://www.openwall.com/john\" target=\"_blank\" rel=\"noopener\"><strong>John the Ripper</strong></a>: Cracks hashed Linux/Unix and Windows passwords.</li>\n<li><a href=\"https://github.com/gentilkiwi/mimikatz\" target=\"_blank\" rel=\"noopener\"><strong>Mimikatz</strong> </a>: For past the hash exploits and extracting passwords from memory on Windows systems.</li>\n<li><a href=\"https://ophcrack.sourceforge.io/\" target=\"_blank\" rel=\"noopener\"><strong>Ophcrack</strong> </a>: Cracks Windows user passwords, using rainbow tables from a bootable CD. Rainbow tables are pre-calculated password hashes that can speed the cracking process by comparing these hashes with the hashes obtained from the specific passwords being tested.</li>\n<li><a href=\"https://www.openwall.com/passwords/windows-pwdump\" target=\"_blank\" rel=\"noopener\"><strong>pwdump</strong> </a>: Extracts Windows password hashes from the SAM (Security Accounts Manager) database.</li>\n<li><a href=\"https://project-rainbowcrack.com\" target=\"_blank\" rel=\"noopener\"><strong>RainbowCrack</strong></a>: Cracks LanManager (LM) and MD5 hashes quickly by using rainbow tables.</li>\n<li><a href=\"https://www.kali.org/tools/hydra/\" target=\"_blank\" rel=\"noopener\"><strong>Hydra</strong> </a>: Cracks logins for HTTP, FTP, IMAP, SMTP, VNC, and many more.</li>\n</ul>\n<p class=\"article-tips warning\">When trying to crack passwords, the associated user accounts may be locked out, which could interrupt your users. Be careful if intruder lockout is enabled in your operating systems, databases, or applications. If intruder lockout is enabled, you might lock out some or all computer/network accounts, resulting in a denial of service situation for your users.</p>\n"}],"videoInfo":{"videoId":null,"name":null,"accountId":null,"playerId":null,"thumbnailUrl":null,"description":null,"uploadDate":null}},"sponsorship":{"sponsorshipPage":false,"backgroundImage":{"src":null,"width":0,"height":0},"brandingLine":"","brandingLink":"","brandingLogo":{"src":null,"width":0,"height":0},"sponsorAd":"","sponsorEbookTitle":"","sponsorEbookLink":"","sponsorEbookImage":{"src":null,"width":0,"height":0}},"primaryLearningPath":"Advance","lifeExpectancy":"Two years","lifeExpectancySetFrom":"2023-01-09T00:00:00+00:00","dummiesForKids":"no","sponsoredContent":"no","adInfo":"","adPairKey":[]},"status":"publish","visibility":"public","articleId":296631},{"headers":{"creationTime":"2022-03-14T15:16:06+00:00","modifiedTime":"2022-03-14T15:18:42+00:00","timestamp":"2022-09-14T18:19:24+00:00"},"data":{"breadcrumbs":[{"name":"Technology","_links":{"self":"https://dummies-api.dummies.com/v2/categories/33512"},"slug":"technology","categoryId":33512},{"name":"Cybersecurity","_links":{"self":"https://dummies-api.dummies.com/v2/categories/33537"},"slug":"cybersecurity","categoryId":33537}],"title":"Security Awareness For Dummies Cheat Sheet","strippedTitle":"security awareness for dummies cheat sheet","slug":"security-awareness-for-dummies-cheat-sheet","canonicalUrl":"","seo":{"metaDescription":"Here's a summary of the key components to a cybersecurity awareness program, including how to to get buy-in from leaders and colleagues.","noIndex":0,"noFollow":0},"content":"Security awareness is much more complicated than just making users “aware.” Implementing an effective security awareness program means that you aren’t just providing information — rather, you’re specifically improving security related behaviors","description":"Security awareness is much more complicated than just making users “aware.” Implementing an effective security awareness program means that you aren’t just providing information — rather, you’re specifically improving security related behaviors","blurb":"","authors":[{"authorId":34698,"name":"Ira Winkler","slug":"ira-winkler","description":"","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/34698"}}],"primaryCategoryTaxonomy":{"categoryId":33537,"title":"Cybersecurity","slug":"cybersecurity","_links":{"self":"https://dummies-api.dummies.com/v2/categories/33537"}},"secondaryCategoryTaxonomy":{"categoryId":0,"title":null,"slug":null,"_links":null},"tertiaryCategoryTaxonomy":{"categoryId":0,"title":null,"slug":null,"_links":null},"trendingArticles":[{"articleId":172026,"title":"Repurposing Items for Beautiful Holiday Decorating","slug":"decorating-for-the-holidays-with-what-you-already-have","categoryList":["home-auto-hobbies","crafts","gifts-holidays"],"_links":{"self":"/articles/172026"}},{"articleId":192609,"title":"How to Pray the Rosary: A Comprehensive Guide","slug":"how-to-pray-the-rosary","categoryList":["body-mind-spirit","religion-spirituality","christianity","catholicism"],"_links":{"self":"/articles/192609"}},{"articleId":193770,"title":"How to Play Rummy: All You Need to Know","slug":"rummy-understanding-the-rules-and-starting-a-game","categoryList":["home-auto-hobbies","games","card-games","general-card-games"],"_links":{"self":"/articles/193770"}},{"articleId":153792,"title":"Format Numbers in Thousands and Millions in Excel Reports","slug":"format-numbers-in-thousands-and-millions-in-excel-reports","categoryList":["technology","software","microsoft-products","excel"],"_links":{"self":"/articles/153792"}},{"articleId":147241,"title":"How to Use the Z-Table","slug":"how-to-use-the-z-table","categoryList":["academics-the-arts","math","statistics"],"_links":{"self":"/articles/147241"}}],"inThisArticle":[],"relatedArticles":{"fromBook":[],"fromCategory":[{"articleId":290240,"title":"Cloud Security For Dummies Cheat Sheet","slug":"cloud-security-for-dummies-cheat-sheet","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/290240"}},{"articleId":270968,"title":"How to Perform a Penetration Test","slug":"how-to-perform-a-penetration-test","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/270968"}},{"articleId":270960,"title":"Penetration Testing with Burp Suite and Wireshark to Uncover Vulnerabilities","slug":"penetration-testing-with-burp-suite-and-wireshark-to-uncover-vulnerabilities","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/270960"}},{"articleId":270942,"title":"Building a Penetration Testing Toolkit: Considerations and Popular Pen Test Tools","slug":"building-a-penetration-testing-toolkit-considerations-and-popular-pen-test-tools","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/270942"}},{"articleId":270933,"title":"How to Structure a Pen Test Report","slug":"how-to-structure-a-pen-test-report","categoryList":["technology","cybersecurity"],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/270933"}}]},"hasRelatedBookFromSearch":false,"relatedBook":{"bookId":290632,"slug":"security-awareness-for-dummies","isbn":"9781119720928","categoryList":["technology","cybersecurity"],"amazon":{"default":"https://www.amazon.com/gp/product/1119720923/ref=as_li_tl?ie=UTF8&tag=wiley01-20","ca":"https://www.amazon.ca/gp/product/1119720923/ref=as_li_tl?ie=UTF8&tag=wiley01-20","indigo_ca":"http://www.tkqlhce.com/click-9208661-13710633?url=https://www.chapters.indigo.ca/en-ca/books/product/1119720923-item.html&cjsku=978111945484","gb":"https://www.amazon.co.uk/gp/product/1119720923/ref=as_li_tl?ie=UTF8&tag=wiley01-20","de":"https://www.amazon.de/gp/product/1119720923/ref=as_li_tl?ie=UTF8&tag=wiley01-20"},"image":{"src":"https://www.dummies.com/wp-content/uploads/9781119720928-203x255.jpg","width":203,"height":255},"title":"Security Awareness For Dummies","testBankPinActivationLink":"","bookOutOfPrint":true,"authorsInfo":"","authors":[{"authorId":34698,"name":"Ira Winkler","slug":"ira-winkler","description":"","hasArticle":false,"_links":{"self":"https://dummies-api.dummies.com/v2/authors/34698"}}],"_links":{"self":"https://dummies-api.dummies.com/v2/books/"}},"collections":[],"articleAds":{"footerAd":"<div class=\"du-ad-region row\" id=\"article_page_adhesion_ad\"><div class=\"du-ad-unit col-md-12\" data-slot-id=\"article_page_adhesion_ad\" data-refreshed=\"false\" \r\n data-target = \"[{"key":"cat","values":["technology","cybersecurity"]},{"key":"isbn","values":["9781119720928"]}]\" id=\"du-slot-63221b2cb5783\"></div></div>","rightAd":"<div class=\"du-ad-region row\" id=\"article_page_right_ad\"><div class=\"du-ad-unit col-md-12\" data-slot-id=\"article_page_right_ad\" data-refreshed=\"false\" \r\n data-target = \"[{"key":"cat","values":["technology","cybersecurity"]},{"key":"isbn","values":["9781119720928"]}]\" id=\"du-slot-63221b2cb6212\"></div></div>"},"articleType":{"articleType":"Cheat Sheet","articleList":[{"articleId":0,"title":"","slug":null,"categoryList":[],"_links":{"self":"https://dummies-api.dummies.com/v2/articles/"}}],"content":[{"title":"Tips for creating effective security awareness programs","thumb":null,"image":null,"content":"<p>The following tips are essential to creating an effective security awareness program:</p>\n<ul>\n<li><strong>Remember that awareness is a cybersecurity function.</strong> The purpose of a security awareness program is to reduce risk by modifying user behaviors. Risk reduction through awareness is just one part of a comprehensive cybersecurity program.</li>\n<li><strong>Avoid claims of perfection and platitudes.</strong> Never claim that you’re creating the human firewall or other forms of perfection. No security countermeasure has delivered perfection, and claims to that effect ruin your credibility — especially when the inevitable happens. You are simply reducing risk.</li>\n<li><strong>Deserve more.</strong> Prove that you’re providing a return on investment and reducing losses while enabling capabilities. You prove the worth of an awareness program by collecting and reporting metrics.</li>\n<li><strong>Consider subcultures.</strong> Many awareness programs are created as a monolith — a single program for everyone. Different parts of your organization, such as people from different demographics, might need different communications tools. You determine this need by knowing whether parts of your organization have different communication styles and different business interests.</li>\n</ul>\n"},{"title":"Basic components of a security awareness program","thumb":null,"image":null,"content":"<p>A security awareness program has three basic components:</p>\n<ul>\n<li><strong>Topics</strong> are the specific awareness issues you’re trying to improve — for example, phishing, physical security, and password security.</li>\n<li><strong>Communications tools</strong> are how you deliver messages — for example, posters, phishing simulations, newsletters, and security ambassador programs.</li>\n<li><strong>Metrics</strong> are tools to determine whether and where the awareness program is having success, and they can come in many forms, such as the number of incidents experienced, attendance at events, likeability measures, or phishing messages reported.</li>\n</ul>\n"},{"title":"Metrics that show what's working, and what isn't","thumb":null,"image":null,"content":"<p>Metrics are critical for showing the success of an awareness program, especially when competing for funding and resources. In a mature program, metrics are used to constantly tune a program by showing what’s working and what isn’t.</p>\n<p>Metrics come in these four categories, each one with a different purpose and value:</p>\n<ul>\n<li><strong>Likeability metrics:</strong> Fundamentally, this metric measures how much users like your content. To collect likeability metrics, survey users about how much they like the materials you produce.</li>\n<li><strong>Engagement metrics:</strong> This metric shows how users consume the data provided in a program. How many read the newsletters? How many show up at events? How many complete the required or recommended training?</li>\n<li><strong>Behavioral metrics:</strong> This metric demonstrates actual changes of behaviors and the success of awareness efforts. To collect this metric, measure specific behaviors and track improvement over time. How many users report phishing messages? What is the percentage of secured desks at the end of the day? What are the number of links blocked on web content filters?</li>\n<li><strong>Return on investment (ROI):</strong> ROI are the most valuable metrics. These metrics assign a financial value to the savings of improved behaviors. For example, if improved awareness reduced phishing incidents by 10 percent, what is the cost savings for the response and recovery? If improved awareness reduces lost computers and USB drives, what are the savings from the reduced losses?</li>\n</ul>\n"},{"title":"Gamification to reward effective behavior","thumb":null,"image":null,"content":"<p><em>Gamification</em> is a reward system that rewards people for practicing desired behaviors. Frequent flier programs and other loyalty programs are examples of gamification. People buy from an organization and receive rewards for it. This encourages the behaviors.</p>\n<p>Get more from your awareness program by incorporating gamification to reward positive security related behaviors.</p>\n"},{"title":"Security ambassadors to promote awareness efforts","thumb":null,"image":null,"content":"<p><em>Security ambassadors,</em> frequently called <em>security champions,</em> are other employees who work in parts of the company and serve as representatives for the awareness program and support awareness efforts locally. They can organize events, spread awareness program messages, answer questions, and otherwise serve as an extension of the awareness team.</p>\n<p>Security ambassadors can be quite valuable for a security awareness program, so invest first in identifying the right people to fill the role and then training them and providing the appropriate resources to support and communicate with them.</p>\n"},{"title":"Quarterly awareness programs that reinforce knowledge","thumb":null,"image":null,"content":"<p>Most awareness programs have an annual schedule, where an awareness manager generally plans for the year and features one topic per month over the course of the year. This straightforward strategy allows for more than sufficient planning. Instead, plan three months at a time.</p>\n<p>Also, as opposed to focusing one topic per month, distribute information about three topics throughout the three-month period. This serves to reinforce the topics for an extended period. Shorter plans also allow for more versatility, such as updating the topics and tools used.</p>\n"}],"videoInfo":{"videoId":null,"name":null,"accountId":null,"playerId":null,"thumbnailUrl":null,"description":null,"uploadDate":null}},"sponsorship":{"sponsorshipPage":false,"backgroundImage":{"src":null,"width":0,"height":0},"brandingLine":"","brandingLink":"","brandingLogo":{"src":null,"width":0,"height":0},"sponsorAd":"","sponsorEbookTitle":"","sponsorEbookLink":"","sponsorEbookImage":{"src":null,"width":0,"height":0}},"primaryLearningPath":"Advance","lifeExpectancy":"One year","lifeExpectancySetFrom":"2022-03-14T00:00:00+00:00","dummiesForKids":"no","sponsoredContent":"no","adInfo":"","adPairKey":[]},"status":"publish","visibility":"public","articleId":291466}],"_links":{"self":{"self":"https://dummies-api.dummies.com/v2/authors/34698/articles?sortField=time&sortOrder=1&size=10&offset=0"}}},"objectTitle":"","status":"success","pageType":"author","objectId":"34698","page":1,"sortField":"time","sortOrder":1,"categoriesIds":[],"articleTypes":[],"filterData":{"articleTypeFilter":[{"articleType":"Cheat Sheet","count":2}]},"filterDataLoadedStatus":"success","pageSize":10},"adsState":{"pageScripts":{"headers":{"timestamp":"2024-11-22T05:50:01+00:00"},"adsId":0,"data":{"scripts":[{"pages":["all"],"location":"header","script":"\r\n<script src=\"https://cdn.optimizely.com/js/10563184655.js\"></script>","enabled":false},{"pages":["all"],"location":"header","script":"\r\n<script>var _comscore = _comscore || [];_comscore.push({ c1: \"2\", c2: \"15097263\" });(function() {var s = document.createElement(\"script\"), el = document.getElementsByTagName(\"script\")[0]; s.async = true;s.src = (document.location.protocol == \"https:\" ? \"https://sb\" : \"http://b\") + \".scorecardresearch.com/beacon.js\";el.parentNode.insertBefore(s, el);})();</script><noscript><img src=\"https://sb.scorecardresearch.com/p?c1=2&c2=15097263&cv=2.0&cj=1\" /></noscript>\r\n","enabled":true},{"pages":["all"],"location":"footer","script":"\r\n<script type='text/javascript'>\r\n(function(){var g=function(e,h,f,g){\r\nthis.get=function(a){for(var a=a+\"=\",c=document.cookie.split(\";\"),b=0,e=c.length;b<e;b++){for(var d=c[b];\" \"==d.charAt(0);)d=d.substring(1,d.length);if(0==d.indexOf(a))return d.substring(a.length,d.length)}return null};\r\nthis.set=function(a,c){var b=\"\",b=new Date;b.setTime(b.getTime()+6048E5);b=\"; expires=\"+b.toGMTString();document.cookie=a+\"=\"+c+b+\"; path=/; \"};\r\nthis.check=function(){var a=this.get(f);if(a)a=a.split(\":\");else if(100!=e)\"v\"==h&&(e=Math.random()>=e/100?0:100),a=[h,e,0],this.set(f,a.join(\":\"));else return!0;var c=a[1];if(100==c)return!0;switch(a[0]){case \"v\":return!1;case \"r\":return c=a[2]%Math.floor(100/c),a[2]++,this.set(f,a.join(\":\")),!c}return!0};\r\nthis.go=function(){if(this.check()){var a=document.createElement(\"script\");a.type=\"text/javascript\";a.src=g;document.body&&document.body.appendChild(a)}};\r\nthis.start=function(){var t=this;\"complete\"!==document.readyState?window.addEventListener?window.addEventListener(\"load\",function(){t.go()},!1):window.attachEvent&&window.attachEvent(\"onload\",function(){t.go()}):t.go()};};\r\ntry{(new g(100,\"r\",\"QSI_S_ZN_5o5yqpvMVjgDOuN\",\"https://zn5o5yqpvmvjgdoun-wiley.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_5o5yqpvMVjgDOuN\")).start()}catch(i){}})();\r\n</script><div id='ZN_5o5yqpvMVjgDOuN'></div>\r\n","enabled":false},{"pages":["all"],"location":"header","script":"\r\n<script>\r\n (function(h,o,t,j,a,r){\r\n h.hj=h.hj||function(){(h.hj.q=h.hj.q||[]).push(arguments)};\r\n h._hjSettings={hjid:257151,hjsv:6};\r\n a=o.getElementsByTagName('head')[0];\r\n r=o.createElement('script');r.async=1;\r\n r.src=t+h._hjSettings.hjid+j+h._hjSettings.hjsv;\r\n a.appendChild(r);\r\n })(window,document,'https://static.hotjar.com/c/hotjar-','.js?sv=');\r\n</script>","enabled":false},{"pages":["article"],"location":"header","script":" <script src=\"//get.s-onetag.com/bffe21a1-6bb8-4928-9449-7beadb468dae/tag.min.js\" async defer></script>","enabled":true},{"pages":["homepage"],"location":"header","script":"<meta name=\"facebook-domain-verification\" content=\"irk8y0irxf718trg3uwwuexg6xpva0\" />","enabled":true},{"pages":["homepage","article","category","search"],"location":"footer","script":"\r\n<noscript>\r\n<img height=\"1\" width=\"1\" src=\"https://www.facebook.com/tr?id=256338321977984&ev=PageView&noscript=1\"/>\r\n</noscript>\r\n","enabled":true}]}},"pageScriptsLoadedStatus":"success"},"navigationState":{"navigationCollections":[{"collectionId":287568,"title":"BYOB (Be Your Own Boss)","hasSubCategories":false,"url":"/collection/for-the-entry-level-entrepreneur-287568"},{"collectionId":293237,"title":"Be a Rad Dad","hasSubCategories":false,"url":"/collection/be-the-best-dad-293237"},{"collectionId":295890,"title":"Career Shifting","hasSubCategories":false,"url":"/collection/career-shifting-295890"},{"collectionId":294090,"title":"Contemplating the Cosmos","hasSubCategories":false,"url":"/collection/theres-something-about-space-294090"},{"collectionId":287563,"title":"For Those Seeking Peace of Mind","hasSubCategories":false,"url":"/collection/for-those-seeking-peace-of-mind-287563"},{"collectionId":287570,"title":"For the Aspiring Aficionado","hasSubCategories":false,"url":"/collection/for-the-bougielicious-287570"},{"collectionId":291903,"title":"For the Budding Cannabis Enthusiast","hasSubCategories":false,"url":"/collection/for-the-budding-cannabis-enthusiast-291903"},{"collectionId":299891,"title":"For the College Bound","hasSubCategories":false,"url":"/collection/for-the-college-bound-299891"},{"collectionId":291934,"title":"For the Exam-Season Crammer","hasSubCategories":false,"url":"/collection/for-the-exam-season-crammer-291934"},{"collectionId":301547,"title":"For the Game Day Prepper","hasSubCategories":false,"url":"/collection/big-game-day-prep-made-easy-301547"}],"navigationCollectionsLoadedStatus":"success","navigationCategories":{"books":{"0":{"data":[{"categoryId":33512,"title":"Technology","hasSubCategories":true,"url":"/category/books/technology-33512"},{"categoryId":33662,"title":"Academics & The Arts","hasSubCategories":true,"url":"/category/books/academics-the-arts-33662"},{"categoryId":33809,"title":"Home, Auto, & Hobbies","hasSubCategories":true,"url":"/category/books/home-auto-hobbies-33809"},{"categoryId":34038,"title":"Body, Mind, & Spirit","hasSubCategories":true,"url":"/category/books/body-mind-spirit-34038"},{"categoryId":34224,"title":"Business, Careers, & Money","hasSubCategories":true,"url":"/category/books/business-careers-money-34224"}],"breadcrumbs":[],"categoryTitle":"Level 0 Category","mainCategoryUrl":"/category/books/level-0-category-0"}},"articles":{"0":{"data":[{"categoryId":33512,"title":"Technology","hasSubCategories":true,"url":"/category/articles/technology-33512"},{"categoryId":33662,"title":"Academics & The Arts","hasSubCategories":true,"url":"/category/articles/academics-the-arts-33662"},{"categoryId":33809,"title":"Home, Auto, & Hobbies","hasSubCategories":true,"url":"/category/articles/home-auto-hobbies-33809"},{"categoryId":34038,"title":"Body, Mind, & Spirit","hasSubCategories":true,"url":"/category/articles/body-mind-spirit-34038"},{"categoryId":34224,"title":"Business, Careers, & Money","hasSubCategories":true,"url":"/category/articles/business-careers-money-34224"}],"breadcrumbs":[],"categoryTitle":"Level 0 Category","mainCategoryUrl":"/category/articles/level-0-category-0"}}},"navigationCategoriesLoadedStatus":"success"},"searchState":{"searchList":[],"searchStatus":"initial","relatedArticlesList":[],"relatedArticlesStatus":"initial"},"routeState":{"name":"Author","path":"/author/ira-winkler-34698/","hash":"","query":{},"params":{"author":"ira-winkler-34698"},"fullPath":"/author/ira-winkler-34698/","meta":{"routeType":"author","prerenderWithAsyncData":true},"from":{"name":null,"path":"/","hash":"","query":{},"params":{},"fullPath":"/","meta":{}}},"profileState":{"auth":{},"userOptions":{},"status":"success"}}

Home
Ira Winkler

Ira Winkler

This All-in-One gathers the expertise of the leading For Dummies authors in the world of cybersecurity, including Joseph Steinberg, author of Cybersecurity For Dummies; Kevin Beaver, author of Hacking For Dummies; Ted Coombs, author of Cloud Security For Dummies; and Ira Winkler, author of Security Awareness For Dummies.

Articles From Ira Winkler

Cybersecurity Cybersecurity All-in-One For Dummies Cheat Sheet

Cheat Sheet / Updated 01-10-2023

To cyber-protect your personal and business data, make sure everyone at home and at work recognizes that they are a target. People who believe that hackers want to breach their computers and phones and that cyber criminals want to steal their data act differently than people who do not understand the true nature of the threat. Many businesses use security awareness programs to improve security related behaviors.

View Cheat Sheet

Cybersecurity Security Awareness For Dummies Cheat Sheet

Cheat Sheet / Updated 03-14-2022

Security awareness is much more complicated than just making users “aware.” Implementing an effective security awareness program means that you aren’t just providing information — rather, you’re specifically improving security related behaviors

View Cheat Sheet