Title: Identify cybersecurity best practices for employees.
Course: Cybersecurity in Family and Consumer Sciences (19299-I-36) > Section: Exploring Cybersecurity Fundamentals

Identification should include

- participating in cybersecurity training
- adhering to email policies, such as
  - reporting phishing
  - verifying the address and the domain of a sender
  - refraining from clicking any advertisements in the work environment
  - being aware of spoofing (i.e., sending an email from someone else’s address)
  - refraining from clicking on links; instead, copy and paste the URL into the browser
  - using a separate communication channel (e.g., telephone) to verify requests
  - protecting personally identifiable information (PII)
  - refraining from sending internal documents to external addresses
- reporting someone accessing a system without the need-to-know
- reporting unintentional violations of policy.

Process/Skill Questions:

- What often causes employee violations of cybersecurity policies?
- How can one avoid engaging in security violations?
- How can one detect a potential security risk in email?
- What is the best action if one mistakenly opens a suspicious link?
- How does using best practices apply to personal use of devices outside of work?