Bigwaverdav

Day 28: Practise the Principle of Least Privilege “Too much access can spoil the recipe for security 👀” The principle of least privilege means accessing only the data, systems and resources you need to do your job. This helps protect sensitive information, reduce security risks and promote accountability. Imagine this: A colleague gives you access to an entire project folder when you only need one document. You notice confidential files containing personal or financial information. Instead of opening them out of curiosity, you leave them untouched and report the excessive access so the permissions can be reviewed. Quick tip: Access only what you need for your task. If you notice you have unnecessary permissions, notify the appropriate colleague or IT team so they can review and correct them. Why should we only access information we need?

Day 27: Avoid Unknown Removable Storage Devices Keep your Cyber diet clean 👀 Not every cybersecurity threat comes through the internet. Some can enter your computer through physical devices, including USB drives, external hard drives, and memory cards. Connecting an untrusted device can expose your system to malware or other security threats. Imagine a friend gives you a USB drive containing a presentation they need you to review. That innocent device could contain malicious files that put your device and data at risk. Quick Tip: Only use removable storage devices from trusted sources and scan them with approved security tools where appropriate. Before connecting a USB drive to your computer, what steps should you take to ensure it is safe to use?