General
Phishing: Be on the lookout for unsolicited calls, emails, and direct messages asking for your personal information. Avoid pop-ups, unfamiliar links, and emails from unknown senders. NEVER give your SSN or account numbers to someone who contacts you unsolicited. THINK BEFORE YOU CLICK!
Strong Passwords: Create strong, secure passwords, or pass phrases at least 16 characters, a combination of letters, numbers, and characters. Change frequently and ensure your passwords are unique for each service/application.
Multifactor Authentication: Enable MFA / 2-Factor to enhance the security of your online banking accounts and all applications.
Software Updates: Ensure that your devices, systems, and software are regularly updated with the latest security patches to prevent vulnerabilities.
Malware Protection: Install anti-virus (Endpoint protection) software from a reputable vendor and keep it up to date.
Monitoring: Keep track of accounts, transactional activity, and review your statements.
Incident Response: Report suspicious activity and responding to potential security breaches.
Secure Sites: Make sure your banking site (URL) starts with https:// The "s" indicates a secure transaction using a different method of communication than standard Internet traffic.
Avoid Links: Avoid using links and go to the official website address directly, such as typing the cf.bank address into your Internet browser's address bar every time.
Avoid Public or Shared Devices: Never access your bank accounts from a public computer at a hotel, library, airport, or public wireless access point.
Network & VPN: Use a firewall and secure trusted network or VPN.
Log Off: Log off your accounts, active sessions, lock, and/or shut down your devices.
Personal Information: Protect your personal information and do not post it on the internet.
Continuous Improvement: Stay informed about the latest security threats and best practices, and regularly review your security measures.
Backup: Back up your data as a preventative measure and last resort to retrieving your data if it’s being held for ransom.
Fight Fraud: Check your credit report annually, opt out of pre-screened offers.
Data Hygiene: Archive or destroy/shred expired documents with personal information (medical records, tax papers, etc.).
Social Media: Don’t overshare on social media (i.e. – don’t share travel memories until you’re home).
Business
Training: Learn about common fraud tactics like phishing and social engineering to recognize and avoid potential threats. Tax season, wire fraud, corporate account takeover, check fraud, and generative AI. Engage with ongoing security training to remain effective and handle security concerns.
Encryption: Encrypt all data both at rest and in transit to protect your information from unauthorized access.
Vendors: Be cautious when sharing personal, confidential, or financial information with third-party vendors and ensure they have adequate security measures in place.