SECURITY ACTION: Right-sized security starting with 'One Star'

I know I need to do security measures, but I don't know where to start...

There are probably many business owners and managers of small and medium-sized enterprises who feel this way.

Are you putting it off, thinking, "We're not a big company that would be targeted" or "We don't have anyone who is an IT expert"?

Actually, there is a system that companies with such concerns should utilize. That is the

SECURITY ACTION program provided by the IPA (Information-technology Promotion Agency, Japan).

In this article, I will explain the content of the first step, "One Star," while incorporating
real-life scenarios from the workplace.

What exactly is "SECURITY ACTION One Star"?

In short, it is a self-declaration that says, "We are working on basic security measures!".

There is no need to introduce special tools or spend a lot of money. You can obtain it by first declaring that you will practice the basic "Five Rules of Information Security."

Now, let's check those "Five Rules" from a practical business perspective.

1. Keep OS and software up to date

Workplace reality: The update notification is annoying, so I'll just close it!

This is the most important one! Using software in an outdated state is like
leaving a door with a broken lock unattended. Criminals (viruses) will pinpoint and target that broken part.

Checkpoints:

• Are you avoiding Windows Update by clicking "Later"?

• Are you still using a PC that hasn't been replaced in several years?

2. Install antivirus software

Workplace reality: I remember installing it, but the subscription might have expired...

Recent attacks cleverly infiltrate through emails disguised as business partners or from ordinary websites. Not having software installed, or having an expired subscription, is like standing on a battlefield with no guard.

Checkpoints:

• Is the software "active" on all PCs?

• Even the standard Windows 'Microsoft Defender' can be a powerful ally depending on how you configure it.

3. Strengthen your passwords

Common workplace scenario: Using the same password for everything. It's convenient because I won't forget it!

I understand that feeling all too well.
However, in this day and age, if one is leaked, all your doors are left wide open.

The basics of protection:

• Make them long, complex, and don't reuse them.

• The current standard is 10 characters or more, mixing alphanumeric characters and symbols.
  Let's put an end to sticking them on your monitor with sticky notes starting today!

4. Review your sharing settings

Common workplace scenario: Folders belonging to people who have already left are still there...

A 'viewable by anyone' state is convenient, but if you take one wrong step, it becomes a gateway to information leaks.

Checkpoints:

• Are the accounts of employees who have resigned still active?

• Are you sending cloud storage URLs with settings that allow anyone to view them?

5. Learn about threats and attack methods

Common workplace scenario: Wait, that email I just got was a fake?

The best defense is 'knowing'.
Recently, there has been an increase in terrifyingly clever emails that intercept ongoing conversations with real business partners.

Important things to remember:

• Don't think 'it won't happen to me'.

• Value that gut feeling when something feels 'suspicious'.

• Create an atmosphere in the office where you can consult with someone immediately if something happens.

'One Star' is not the goal, but the starting line for peace of mind

Having read this far, many of you likely feel that 'this is something we can do ourselves.' What is required for the SECURITY ACTION One Star is by no means anything extraordinary.

However, the reality is...

• 'PCs with updates stopped due to being busy'

• 'Accounts where it is unclear who is managing them' are lurking in every company.

This effort toward 'One Star' is like a health checkup to identify your company's weaknesses and minimize risks.

Even if you don't have an IT specialist, it's okay.

'Even so, I'm worried about where to start checking...'
'There are too many technical terms, and in the end, I don't really understand.'

In such cases, please consult with IT Work Lab.
As an 'external IT department' for small and medium-sized enterprises without dedicated IT staff, we provide the following support.

• Current security diagnosis (Start here first!)

• Concrete configuration assistance to clear the '5 Articles'

• SECURITY ACTION declaration support

There is no need to aim for perfection.
Why not start together by 'knowing your current state' first?

Contact us here:IT Work Lab Official Website