Solutions
Advisory Services
Clinical Development
- Generics Development
- Clinical Operations
- Clinical Data Sciences
- Medical and Safety Services
- RWD & RWE Services
Post Marketing
- Safety Services
- Post marketing Studies
- Regulatory Affairs
Information Security and Awareness Week 2023: Data Security
In today's interconnected world, where our lives are seamlessly intertwined with the digital realm, cybersecurity has become a critical aspect of our daily lives. The more we rely on technology for communication, entertainment, and business, the more crucial it becomes to understand the landscape of cyber threats and practice cybersecurity awareness.
As we continue to grow and innovate, protecting our data and maintaining the trust of our clients, partners, and employees is of paramount importance. The information Security Group (ISG) has been formed to champion this cause, ensuring that the highest standards of cybersecurity are upheld across all aspects of our organization.
What does the ISG do?
Risk Avengers
Identify threats and arm our Chief Information Security Officer (CISO) with potent strategies to neutralize them.
Cyber Sleuths
Equip colleagues with game-changing cybersecurity know-how to be defenders of data within their teams.
Breach Busters
Rapidly respond to security incidents, minimizing impact, and initiating recovery with precision.
Policy Architects
Craft cutting-edge security policies that adhere to industry benchmarks and regulations for an ever-evolving defence.
Information Security Awareness Week (ISAW 2023)
Maharajan S
Chief Information Security Officer,
Navitas Life Sciences
The ISG conducted a weeklong Cybersecurity awareness campaign, Information Security Awareness Week (ISAW 2023), to drive home the importance of taking the right steps towards building a safe digital environment. The initiatives included quizzes, awareness mailers, real life incident discussions and ways to prevent them.
Another very exciting session was the ‘Coffee with CISO’, where our Chief Information Security Officer, Maharajan S, provided vital insights into data security, staying vigilant against breaches, highlighting the importance of safe online behavior, the significance of mobile data security, and the dangers that social media can pose. Excerpts of the awareness session are included in this blog.
What are the Cybersecurity and Incident Response Strategies in place at Navitas Life Sciences?
We have very stringent measures in place to secure our digital landscape. Our laptops have very secure applications that prevent/ alert about impending attacks. Our dedicated Information Security Group works diligently to seal our data and prevent any breach.
Incident response strategies include a roadmap for action when there is an alert sounded, aiding in effective management to navigate the digital crises.
Key Points to Remember
Confidentiality
Treat all personal data you come across during the course of your work as highly confidential. This includes information about colleagues, clients, and any other individuals associated with our company.
Data Access
Access to personal data should be on a need-to-know basis. Only authorized personnel should have access to such information, and it should be used solely for legitimate business purposes.
Security Measures
Utilize company-provided security tools and protocols to ensure the safety of personal data. This includes secure passwords, encryption, and regularly updated antivirus software.
Phishing and Social Engineering
Be cautious of unsolicited emails or messages requesting personal information.
Data Transfers
When sharing personal data, ensure that the recipient is authorized to receive the information and that the appropriate security measures are in place.
Data Retention
Personal data should only be retained for as long as necessary. Once its purpose has been fulfilled, it should be securely disposed of following company guidelines.
Data Disposal
Properly dispose of physical documents containing sensitive data by shredding them. When deleting digital files, ensure they are securely erased from your system.
Data Breach Reporting
If you suspect a data breach or discover any unusual activity related to personal information, report it immediately to the IT support or Security team.
Employee Training
Stay updated on company policies regarding data protection and privacy. Regularly participate in training sessions and stay informed about best practices.
What is Phishing and what can be done to avoid it?
Good practices are essential for safe online behavior. One of the major threats is phishing, which is when cybercriminals try to trick unsuspecting users into revealing sensitive information. By cultivating an awareness of phishing techniques, users can defend themselves against these digital traps.
Top Tips on recognizing and Avoiding Phishing Scams
Be Wary of Links
Don't rush into clicking links or downloading attachments in unexpected emails. Find out if the sender and content seem legitimate.
Verify the Source
Hover over links to see the actual web address before clicking. If it looks suspicious or different from what you expect, don't proceed.
Check for Typos
Poor grammar and spelling mistakes are red flags. Legitimate communications from any reputable organization will be error-free.
Watch out for Urgent Requirements
Phishers often create a sense of urgency to manipulate you into quick actions. Always double-check with colleagues or ISG Members or IT Support if a request seems unusual.
Protect Personal Data
Never share sensitive information like passwords, social security numbers, or financial details via email. Our organization will never ask for these via email.
Remember, you're the first line of defense in keeping our digital environment secure.
Tell us more about setting unique and strong Passwords.
It is important to use strong, and unique passwords. With the rising tide of cyberattacks, reusing passwords across multiple accounts is risky, as any breach in any one of the platforms could result in data compromise across platforms.
It is important to develop a unique password combination using alphabets, numbers and special characters that are difficult to decipher, and it should be changed every 90 days.
What is Two-factor authentication?
Two-factor authentication (2FA) adds an extra layer of verification beyond just a password. This allows people to prevent unauthorized access attempts.
What is Malware and how do we identify secure websites?
All you need to know – Cyber security Threats and Attack
Malware
Malicious software is a program installed into a system to compromise its data’s availability, integrity or confidentiality
Phishing
Cybercriminals send malicious emails that seem to come from legitimate resources.
Spear Phishing
Target only privileged users such as system administrators and C-suite executives.
Ransomware
It is a type of malware attack in which the attacker locks or encrypts the victim’s data and threatens to publish or blocks access to data unless a ransom is paid.
Man in the Middle Attack
Occurs when cyber criminals place themselves between a two-party communication and may filter and steal sensitive data and return different responses to the user.
Advanced Persistent Threats (APT)
Occurs when a malicious actor gains unauthorized access to a system or network and remains undetected for an extended time.
DNS Attack
The attackers leverage the DNS vulnerabilities to divert site visitors to malicious pages (DNS Hijacking).
Denial of Service Attack
Flooding systems, networks, or servers with massive traffic, thereby making the system unable to fulfill legitimate requests.
SQL Injection
Occurs when cybercriminals attempt to access the database by uploading malicious SQL scripts. Once successful, the malicious actor can view, change, or delete data stored in the SQL DB.
Zero-day Exploit
Occurs when software or hardware vulnerability is announced, and the cybercriminals exploit the vulnerability before a patch or solution is implemented.
Malware, from viruses to Trojans are digital parasites. The use of gaming and social media sites could result in malware entering the system.
Secure websites have a lock symbol and an s in https in their domain name. Such sites are authority sites, and so, authentic sites.
Tell us about Email Security and social media Hazards.
It is important to recognize red flags in suspicious emails, and to verify the authenticity of senders. It is best to avoid interacting with unsolicited links or attachments, which could be vehicles for malware or phishing attempts.
Social media has revolutionized how we connect and share, however, they pose substantial security risks. Individuals should use a personal computer and provide minimal personal information, as oversharing could attract cybercriminals to execute targeted attacks. With the right privacy settings and caution when accepting friend requests, users can fortify their digital social circles.
How should we ensure Mobile Data Security?
Mobile devices have become an indispensable part of our lives. Our phones have a treasure trove of personal and financial data, and securing such data is non-negotiable. It is important to ensure robust security measures like strong passcodes, biometric authentication, and encryption, acting as a shield against potential breaches.
Mobile Device Security Tips
Wi-Fi & Bluetooth
- Don’t select automatic join for unfamiliar Wi-Fi networks
- Always turn off Wi-fi when you aren’t using or don’t need it.
- Never send sensitive information through public Wi-fi network
- Never make payment or finance transactions through public Wi-Fi.
- Disable automatic Bluetooth pairing
- Always turn off Bluetooth when you don’t need it
Apps
- Only use apps available in the device app store. Never download apps from browser.
- Keep them updated regularly
- If they are no longer supported by the Apps owners, please delete it.
- Avoid giving access to contact, storage and camera for any app unnecessarily.
Browser
- Never save your login information when you are using a browser.
- Pay attention to the URL, check if it is legitimate
- Watch out for ads, giveaways, contests that may lead to a phishing attack.
Smishing ( Via messages)
- Treat the message the same way you would treat Email, always think before clicking.
- Don’t trust messages that attempt to get you to reveal personal information
Cybersecurity awareness equips us with the skills and ability to navigate the intricate and evolving landscape of the digital domain. By adopting safe online behavior, understanding mobile data security, and being cautious on social media, we can truly harness the power of technology while protecting ourselves from potential threats. The knowledge sharing awareness and training session aided in nurturing a digitally safe environment.
To know more about our services and solutions, reach out to us at