Starting the New Year with New Tech… and New Risks
The holidays are over, and chances are someone in your household received a shiny new tech gadget from Santa. It might sound odd for someone in digital forensics to bring this up, but it ties directly to protecting yourself and your business from insider threats.
Remember, not all insider threats are deliberate. Many security risks come from people simply not knowing better. That’s why education is such a powerful defense.
Think of Your Home Like a Small Business Network
When assessing your online risks, it helps to start small. Think of your household as its own little company. You already apply business logic to your finances, bringing in more money than you spend, so why not look at data security the same way?
Consider your home network, your computers, smartphones, gaming systems, printers, and even connected storage. Who’s using them? What’s exposed? What do you control, and what might be a blind spot?
Begin at the Gateway: Your Internet Connection
Start with your internet connection. For most homes, that’s a modem or router from your provider. The first step is ensuring your Wi-Fi is encrypted and not “open.” If you never needed a password to connect, your network might be unsecured. Talk to your provider about adding encryption and setting up a strong, unique password.
Next, figure out which devices are on your network. You could walk through the house and write them down, but that might miss hidden or forgotten connections. A simple way to start fresh is by changing your network name or password. If “Smith Family Wi-Fi” becomes “Smith Family Secure Wi-Fi,” everyone and every device will need the new credentials. This lets you see exactly who and what reconnects.
Set Up a Guest Network for Others and for IoT Devices
If your router allows it, create a guest network. Use it for visitors’ devices, but also consider putting smart gadgets there too; things like doorbell cameras, thermostats, or internet-connected appliances.
Why? You generally have less control over these devices. They might not get security updates as reliably, or they may poke holes in your firewall for remote access. Keeping them on a separate network means they can’t easily reach your more sensitive computers or data if compromised.
Think of it like running a business: you wouldn’t let guests or unsecured devices use the same internal network your employees rely on to handle confidential work.
Control Where Your Network Goes with DNS
Your router uses something called DNS (Domain Name System) to turn website names into numeric addresses. By default, your DNS is likely set to your internet provider’s servers. There’s nothing inherently wrong with that, but you can use alternate DNS services to add safety features.
For example, OpenDNS offers a free home plan that can block known malware sites and even filter adult content, helpful if you have kids. Their business services do even more, such as reducing phishing threats by blocking dangerous sites before anyone connects. It’s like putting bumpers in the bowling alley: it won’t solve every problem, but it helps keep things on track.
Don’t Skip the Basics: Cyber Hygiene Still Matters
Even with these technical measures, one of the best defenses is simply good habits.
That starts with email. Everyone in your home or company needs to be careful with unexpected emails, especially those claiming to be from banks or credit card companies. Instead of clicking the link inside, close the email and go directly to the site or call the number you know is legitimate. It might be less convenient, but it’s much safer.
Attackers count on you panicking. They want your first thought to be, “Someone’s trying to hack my account!” so your second thought is to click the link they’ve so helpfully provided. The same skepticism should apply to anything online, whether you’re downloading a song or chatting with someone new.
Keep Learning and Stay Vigilant
Taken together, these tips can make your household or small business far more secure in the year ahead. It’s worth continually learning how to better safeguard your data and devices. Good resources include the FTC, the Small Business Administration, and SANS.
A little caution now means a lot less trouble later. Here’s to a happy and more secure new year.