First it was ISC2, now this..
Ahead to the next
Thanks to my Cyber family for the inspiration
@CyberGuyVick@Cyber_GRC@sisinerd and do many that I can't mention..
Day 28: Practise the Principle of Least Privilege
“Too much access can spoil the recipe for security 👀”
The principle of least privilege means accessing only the data, systems and resources you need to do your job. This helps protect sensitive information, reduce security risks and promote accountability.
Imagine this: A colleague gives you access to an entire project folder when you only need one document. You notice confidential files containing personal or financial information. Instead of opening them out of curiosity, you leave them untouched and report the excessive access so the permissions can be reviewed.
Quick tip: Access only what you need for your task. If you notice you have unnecessary permissions, notify the appropriate colleague or IT team so they can review and correct them.
Why should we only access information we need?
Day 29: Keep Work and Personal Accounts Separate
“Mixing work and personal accounts? That’s a recipe for trouble 👀”
Your work and personal accounts hold different types of information. Mixing them can increase the risk of accidental data sharing and expose both your personal information and your organisation’s data if an account is compromised.
Imagine this: You use your personal email for both private messages and work documents. One day, your personal account is hacked. Suddenly, an attacker could access more than your private conversations, they might also find sensitive work information.
Quick tip: Use your official work accounts for professional activities and personal accounts for private matters. Avoid forwarding confidential work emails to personal accounts, and follow your organisation’s policies on approved apps and devices.
What steps can you take to reduce the risks of mixing work and personal accounts?
Day 27: Avoid Unknown Removable Storage Devices
Keep your Cyber diet clean 👀
Not every cybersecurity threat comes through the internet. Some can enter your computer through physical devices, including USB drives, external hard drives, and memory cards. Connecting an untrusted device can expose your system to malware or other security threats.
Imagine a friend gives you a USB drive containing a presentation they need you to review. That innocent device could contain malicious files that put your device and data at risk.
Quick Tip: Only use removable storage devices from trusted sources and scan them with approved security tools where appropriate.
Before connecting a USB drive to your computer, what steps should you take to ensure it is safe to use?
Day 26: Educate Senior Citizens
“Knowledge is the best ingredient for online safety 👀”
Cybersecurity awareness should extend to everyone, including senior citizens who may be less familiar with common online scams. A little guidance can help them understand how scammers operate, question suspicious requests, and make safer decisions when using their phones or browsing the internet.
Imagine your grandmother receives a text message claiming she has won a cash prize. The message asks her to click a link and provide her bank details to claim the reward. Excited by the offer, she follows the instructions without realising that the message is fraudulent.
Quick Tip: Take time to explain the warning signs of scams, such as unexpected prizes, suspicious links, requests for personal information, and messages that pressure people to act quickly. Encourage them to verify offers before responding and to contact someone they trust when uncertain.
What is one online safety habit every senior citizen should know?
Day 25: Check Before Scanning QR Codes
“Scan with care, don’t feed scammers 👀”
QR codes make everyday tasks easier, from viewing menus to paying for parking. But cybercriminals can replace legitimate codes with malicious ones that lead to fake websites designed to steal your personal or financial information.
Imagine this: You park your car and scan a QR code on a parking sign to pay. The website looks convincing, but the code has been replaced with a fake one designed to steal your card details. You could end up paying a scammer instead of the parking operator.
Quick tip: Preview the web address before opening it. Check that the domain matches the official site. Look for signs of tampering, and verify payment instructions through an official website or app if anything seems suspicious.
What steps can help verify whether a QR code leads to a legitimate website?
Day 24: Encrypt Sensitive Data on Your Devices
“Encryption is the secret ingredient to protecting your data 👀”
Locking your device is important, but what happens if it’s lost or stolen? Sensitive documents, financial records and personal files could be at risk if someone finds a way to access your device storage.
Imagine this: Your laptop is stolen from your bag. It has a login password, but that alone may not protect its stored data from every attempt to access it. Full-disk encryption helps keep your files unreadable without the appropriate key.
Quick tip: Check your device security settings and enable supported encryption features, such as BitLocker on Windows or FileVault on Mac. Keep your recovery key somewhere secure and back up important data.
Is a strong password enough to protect your files?
It’s not a question of if, but when.
Every organisation that stores, processes, or manages information needs Cybersecurity professionals to protect its information assets and reduce risk.
Don’t wait until a breach happens before taking Cybersecurity seriously ✨
Day 23: Respond Quickly to Account Compromise
“A quick response is a healthy Cybersecurity habit 👀”
Unusual login alerts, unexpected password resets or changes to your account settings could be warning signs that someone has gained unauthorised access. Ignoring them could give an attacker more time to take control.
Imagine this: You receive a notification that your account’s recovery phone number has been changed, but you ignore it. Later, you discover you can no longer sign in because someone has changed your password.
Quick tip: If you notice unfamiliar logins or unexpected account changes, access the official website or app, change your password from a trusted device, review recovery details, sign out unfamiliar sessions and enable MFA.
What unusual account activity would make you suspect someone else had gained access?
Day 22: Disable Automatic File Downloads in Messaging Apps
“Don’t let unknown files land on your plate automatically 👀”
Every day, we receive pictures, videos, documents, and other files through messaging applications. While many of these files are harmless, some may contain malicious content or come from untrusted sources. When automatic downloads are enabled, certain files may be saved to your device without you deliberately choosing to download them
Imagine receiving an unexpected attachment in a messaging group, labelled as an important document. Although you don't recognise the sender, the file downloads automatically because of your app settings. While downloading a file does not necessarily mean your device is infected, opening malicious attachments can create security risks.
Quick Tip: Disable automatic file downloads where supported, verify unfamiliar senders, and avoid opening unexpected files.
What other steps can help reduce the risks of automatic file downloads in messaging apps?
I am asking again. What will it take for the Nigerian government to mandate that its agencies have dedicated, in-house Cybersecurity professionals? And is there a way to ensure that these positions are openly advertised and accessible to qualified, competent professionals through a transparent, merit-based recruitment process?
Day 21: Close Accounts You No Longer Use
“Time to clear out those digital leftovers 👀”
Forgotten online accounts can still hold personal information, saved payment details and outdated passwords, creating opportunities for cybercriminals if they're compromised.
Imagine this: You signed up for a food delivery service while travelling but never used it again. Your account still contains sensitive information. If someone gains access, that information could be misused.
Quick tip: Review your online accounts regularly and close those you no longer need. Save any important information first, use the official deletion process, and check whether the account is linked to other services.
Question: How can closing unused accounts help reduce an individual's digital risk?
Day 20: Enable Remote Find, Lock, and Wipe Features
“Lost your device? Don’t let your data become someone else’s meal 👀”
What happens when your phone or laptop goes missing? A lost or stolen device can put your personal information, work files and saved accounts at risk.
Imagine this: You realise your laptop is missing after an event. It contains sensitive documents and private information. If remote security features were enabled beforehand, you may be able to locate or lock it remotely, and, if necessary, erase the data.
Quick tip: Enable your device’s built-in finding and remote-locking features in advance. Know how to use them, keep important data backed up, and check whether remote erasure is available.
What steps can be taken to secure sensitive information on a lost or stolen device?
Monday Motivation ✨
This week, choose to 👇🏾
Believe in yourself more.
Be grateful for how far you've come.
Stay focused on your goals.
Keep going, even when it's difficult.
Celebrate your progress, no matter how small 💪
Day 18: Review App Permissions Regularly
“Give Apps only the ingredients they need 👀”
It's easy to forget about the permissions we grant to applications after installing them. Many apps ask for access to features such as your camera, microphone, contacts, or location. While some permissions are necessary for an app to function, others may no longer be needed, especially as the way you use the application changes over time.
Imagine downloading a simple calculator app that requests access to your contacts and precise location. These permissions may have little to do with its primary function and could raise privacy concerns.
Quick Tip: Review app permissions regularly in your device settings. Remove access you don't need, limit sensitive permissions to when an app is in use where possible, and uninstall apps you no longer use.
What app permissions do you think people overlook most often?
Day 17: Download Software only from trusted sources
“Check the ingredients before you install 👀”
Downloading software is part of everyday life, whether it's an app, a work tool or a system update. A program that looks legitimate isn't always safe. Cybercriminals can disguise malicious software as genuine applications to steal information, spy on activity or damage your device.
Imagine this: You search online for a useful application and click a download link that looks genuine. Unknown to you, the installer contains malware that could compromise your device and personal information.
Quick tip: Download software from official developer websites or reputable app stores. Check the publisher, review requested permissions, and avoid cracked software or unfamiliar download links. Never ignore security warnings just to complete an installation.
How can you tell whether a software download is legitimate?
Your choice of partner is one of the most important decisions you will ever make. Choose someone who respects you, supports your dreams and brings peace and stability into your life ✨
When you’re in a healthy relationship, you are empowered to become the best version of yourself. That positive energy would definitely flow into every other area of your life, allowing you to grow and flourish. Never underestimate the power of having the right person by your side ❤️
There are two major phases of parenting.
The formative phase, which the mother is mostly responsible for, and the adolescent phase which the father is mostly responsible for.
If you do not marry a good wife and allow her to take charge while giving her all the support, you'll struggle badly as a father when it gets to your turn.
The 40-year-old married woman whose story we read on the back page is an example.
At age 8, her son is already threatening to report his mother to his father because she wants to discipline him for being recalcitrant.
Why is this so?
Because her husband (their father) always scolds his wife (their mother) in the presence of their children each time she tries to discipline them.
What is he doing?
He's not allowing his wife to lay a proper foundation for the child.
If this continues, by the time the boy reaches adolescence, he will start to misbehave.
Especially as his father is a wealthy man.
And he's going to find it difficult to control the boy.
What typically happens to young boys who were raised badly, is that they'll strat to watch porn at a very young age, join bad groups and start to bully their classmates.
Because if anything happens, their father will be there to defend them.
They say that a child who usually has the backing of his parents will use both legs to break a door to steal.
And the one who remembers the type of strict home he or she comes from will use only one leg.
That's a very simple adage that carries a profound meaning.
You don't scold your wife in the presence of your children because she tried to instill discipline on them.
In fact, your wife's role is to enforce your discipline and rules or laws.
"If you don't do this, I'll report you to your father when he gets back".
And not...
"If you touch me, I'll report you to Daddy when he gets back".
Even if you may not like her manner or style of discipline, you can caution her in private but defend her in public.
Your wife and children must see that you and their mother are in unison in decision-making, even if one of you does not like the style or method.
That's what effective communication will help you achieve in your marriage.
Spare the rod and spoil the child.
End.
I am about to cast a very important way the female brain operates.
“The Female Recency Theory”
A woman’s appreciation of a man’s gestures is inversely proportional to how long ago he made them.
If you had to choose between starting a business for a woman and giving her gifts randomly over time, go for the latter.
Women don’t know how to hold on to the emotional gratification of things you did a long time ago. They’re often more influenced by recent experiences.
For instance, if you set up a business for her with ₦3 million in 2020, but from then until 2026, you suddenly became stingy, she might end up resenting you.
You’d probably be better off spreading that ₦3 million across six years, consistently doing thoughtful things for her along the way. She’ll love you more for that.
This is how 90% of them think.
Day 16: Secure Access to Your Devices
“Lock your device before someone takes a bite of your data 👀”
Your phone and laptop hold a lot of valuable information, from private messages and banking apps to emails and sensitive documents. What if someone gained access without your permission?
Imagine this: You leave your laptop unattended without locking the screen. Someone could access your emails, private files or confidential information.
Quick tip: Use a strong password, enable additional authentication where available, and set your device to lock automatically after a short period of inactivity. Always lock your screen before stepping away.
Remember: A few seconds to lock your device can help protect a lot of valuable information.
What are the potential consequences of inadequate device access controls?