Cybersecurity Awareness Starts With You.

Essential Concepts

Cybersecurity is the practice of protecting systems, networks, applications, accounts, and information from unauthorized access, misuse, disruption, or destruction.

• Confidentiality — information is accessible only to authorized people.
• Integrity — information remains accurate and is not improperly altered.
• Availability — systems and information remain accessible when needed.
• Authentication — verifying who a user or system is.
• Authorization — determining what an authenticated user is allowed to do.
• MFA — using multiple factors to strengthen account security.

Good Security Habits

Small defensive habits prevent many common security incidents.

• Use unique, strong passwords and a reputable password manager.
• Enable multi-factor authentication whenever available.
• Keep operating systems, browsers, applications, and plugins updated.
• Verify unexpected links, attachments, requests, and payment instructions.
• Use least privilege: give accounts only the access they actually need.
• Back up important information and test that backups can be restored.
• Report suspicious activity instead of ignoring it.

Red Flags to Look For

• Unexpected requests to reset passwords or verify accounts.
• Urgent requests for money, gift cards, transfers, or confidential information.
• Links whose destination does not match the organization they claim to represent.
• Unexpected attachments or requests to enable macros or other active content.
• Messages that create unusual pressure or demand secrecy.
• Sender addresses or domains that look subtly different from the legitimate one.

Common Techniques

• Pretexting — inventing a scenario to obtain information or access.
• Baiting — offering something tempting to encourage an unsafe action.
• Quid pro quo — promising a benefit in exchange for information or action.
• Tailgating — following an authorized person into a restricted area.
• Impersonation — pretending to be a trusted employee, provider, or authority.

Defend Against Manipulation

• Pause when a request is unusually urgent, secretive, or emotionally charged.
• Verify identity before sharing sensitive information or granting access.
• Follow established procedures even when the requester claims to be senior.
• Never bypass security controls simply because someone asks you to.
• Report suspicious behavior so others can be warned.

What You Can Practice

• Web application security fundamentals.
• Vulnerability scanning and basic security assessment.
• Linux and network security fundamentals.
• Phishing-awareness simulations in controlled environments.
• Log analysis and security monitoring.
• Incident investigation and defensive response.

Safe Testing Principles

• Only test systems you own or have explicit permission to assess.
• Use isolated lab environments for experiments.
• Do not collect real people's passwords or sensitive information.
• Keep simulations clearly controlled and documented.
• Restore lab systems after testing when appropriate.