--- title: 5 Data Security Best Practices You Need to Know description: Security is a big issue in our everyday lives and you need to make sure your employees, data, and organization is protected. Read our recommended tips. image: https://blog.techboston.com/hubfs/5%20security%20tips.png --- ### Search engine Use this form to find things you need on this site Search × [![We're better together.](https://blog.techboston.com/hubfs/Tech_Networks_of_Boston_June2018/Images/Logo_without_motto-copy-web.png)](https://techboston.com) - [About TNB](https://techboston.com/about-tnb/) - [Overview](https://techboston.com/about-tnb/) - [Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Blog](https://techboston.com/about-tnb/blog/) - [Free Resources](https://techboston.com/about-tnb/resources/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Services](https://techboston.com/our-services/services-overview/) - [Overview](https://techboston.com/our-services/services-overview/) - [Integrated Services](https://techboston.com/our-services/integrated/) - [Managed Services](https://techboston.com/our-services/managed-services-2/) - [Project Services](https://techboston.com/our-services/project-services/) - [Case Studies](https://techboston.com/case-studies/) - [Using IT to Increase Productivity and Reduce Costs](https://techboston.com/case-studies/increase-productivity/) - [Updating Technology for Growing Needs](https://techboston.com/case-studies/updating-technology/) - [Shifting to Remote Work in the Midst of a Crisis](https://techboston.com/case-studies/remote-work/) - [Protecting Your Organization in the Wake of Cybercrime](https://techboston.com/case-studies/cybercrime/) - [Integrating Technology for Mission Driven Success](https://techboston.com/case-studies/integrated-technology-success/) - [Events](https://techboston.com/events/) - [Upcoming Events](https://techboston.com/events/) - [Past Roundtable Events](https://techboston.com/past-roundtable-events/) - [TNB’s Dialogue Series on Nonprofit Data and Evaluation](https://techboston.com/about-tnb/blog/best-practices-data-evaluation/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) - [Home](https://techboston.com/) - [About Us](https://techboston.com/about-tnb/) - [2022 Annual Report](https://techboston.com/wp-content/uploads/2023/03/2022-Benefit-Report.pdf) - [Blog](https://techboston.com/about-tnb/blog/) - [Certifications & Awards](https://techboston.com/about-tnb/certifications-awards/) - [Case Studies](https://techboston.com/about-tnb/case-studies/) - [Job Opportunities](https://techboston.com/about-tnb/careers/) - [Mission](https://techboston.com/about-tnb/mission/) - [Partnerships and Affiliations](https://techboston.com/about-tnb/partnerships/) - [Events](https://techboston.com/events/) - [Services](https://techboston.com/our-services/) - [Contact Us](https://techboston.com/about-tnb/contact-us/) # 5 Data Security Best Practices You Need to Know [Home](https://techboston.com) / 5 Data Security Best Practices You Need to Know Return to Previous Page [![image-1](https://blog.techboston.com/hubfs/5%20security%20tips.png)](https://blog.techboston.com/hubfs/5%20security%20tips.png) [View large](https://blog.techboston.com/hubfs/5%20security%20tips.png) [Tech Tips](https://blog.techboston.com/tag/tech-tips), [nonprofit IT](https://blog.techboston.com/tag/nonprofit-it), [secure passwords](https://blog.techboston.com/tag/secure-passwords), [antimalware](https://blog.techboston.com/tag/antimalware), [security services](https://blog.techboston.com/tag/security-services), [IT security](https://blog.techboston.com/tag/it-security), [IT security strategy](https://blog.techboston.com/tag/it-security-strategy) ### 5 Data Security Best Practices You Need to Know Security is a big issue in our everyday lives and you need to make sure your employees, data, and organization are protected.  [Cybint News](https://www.cybintsolutions.com/cyber-security-facts-stats/) states, "**43 percent of cyber-attacks target small businesses,** 64% of companies have experienced web-based attacks, and 62% experienced phishing & social engineering attacks." These statistics are alarming. Cybercrime will continue to evolve because cybersecurity products and solutions simply can't keep up.   Many organizations may think that they are not large enough to be a target but being smaller in size is one of the things that makes your organization more appealing to cybercriminals. Nonprofits, small businesses, and schools usually have fewer IT staff and resources, making your organization particularly vulnerable. Nonprofit IT staff frequently juggle responsibilities to keep the organization’s systems running, which often means that you and your coworkers have less time to focus on security.  We’ve compiled **5 IT security tips** to protect your data:  1. ###### **Practice ’think before you click’.** When browsing online or opening emails, it’s best to follow one simple motto: “think before you click”. Here’s a not-so-fun fact – your email filters have a 10.5-15 percent failure rate. To avoid phishing scams, there are a few security best practices you can follow. Always check that you recognize the sender and domain by hovering over hyperlinks before clicking. Never open attachments from an unknown source and always contact the person via phone if something seems unusual. [Configure rules](https://www.securit360.com/blog/configure-warning-messages-office-365-emails-external-senders/) in your company's email system to provide visual cues to your employees about email safety with **external sender** notifications. Office 365 also offers [advanced threat protection](https://products.office.com/en-us/exchange/online-email-threat-protection) for E1 and E3 plans at a discounted price through Microsoft's donation plan. Employees are the first line of defense from cybercriminals and are more important than any firewall.  Implementing a [security awareness training program](https://techboston.com/our-services/phishing-testing/) at your organization is critical to your [IT security strategy](https://blog.techboston.com/top-5-reasons-start-2019-security-strategy). This should include ongoing training and it should be part of your new employee onboarding process. We currently offer free phishing testing for your employees, which can be a fun way to test their knowledge. It is also important to remain cautious when browsing online. Avoid visiting unknown websites and always make sure the site is protected with HTTPS when submitting sensitive data.  The ‘s’ in HTTPS stands for 'secure' and it means all communications between your browser and the website are encrypted.  Make sure to never download software from untrusted sources.  Sites that advertise free content such as TV shows, live-streaming, or free software are big red flags and may contain malware. [We've written more about social engineering before.](https://blog.techboston.com/social-engineering-red-flags) 2. ###### **Keep all software up to date and utilize anti-virus or anti-malware programs.** Anti-virus software helps to protect your computer by recognizing viruses that can harm your computer by deleting them.  Anti-malware is software that defends against all malware including viruses, worms, spyware, Trojan horses, and other unwanted invaders that can harm your computer. Microsoft releases hundreds of security patches for computers and servers each month. Always follow best practices for patching and ensure that your devices have the proper updates installed.  If you currently work with a MSP, take advantage of their server and workstation patching services to keep your data safe. This also applies to your server or workstation operating system - versions are only supported and secure for a certain time frame. 3. ###### **Secure your devices and sensitive data.** Always use a passcode on a phone or tablet so that no one can gain access while you’re not using it. For desktop or laptops, make sure you lock your screen or shut down the system when it’s not in use, even if you’re just walking away to grab a cup of coffee.  If you keep sensitive information on an external hard drive or flash drive, keep them password protected. Use encryption when storing or sending sensitive data via email.  Delete sensitive data files from your devices when you no longer need them; this includes keeping social security numbers, credit card information, and healthcare documents removed from your devices. This will be especially important if you were ever victim of a [ransomware attack](https://blog.techboston.com/true-story-ransomware-tried-take-one-clients-lost) where hackers lock your data and infiltrate your system. 4. ###### **Back up your data on a regular basis and keep it secured.** If you are a victim of a security incident, this will allow you to retain your data.  Backups for your entire network infrastructure are crucial and you can enlist the help of a MSP to choose the right [solution](https://techboston.com/our-services/managed-services-2/).  This is also relevant for websites, tablets, phones, and computers. We've written more about the ways you can avoid network failures and manage risk [here](https://blog.techboston.com/network-failures-10-ways-can-avoid-mishaps-manage-risk). 5. ###### **Practice secure password management.** A strong password should look like a series of random characters and there are some best practices that you should follow when creating them. While you can use secure password generators online, here are a few simple steps to create your own secure password: **Step 1**: Think of a sentence or phrase with at least 8 words that you can easily remember but is hard for someone else to guess. This phrase could be a line from your favorite movie, a quote that you like, or song lyric that always gets stuck in your head. **Step 2**: Take the first letter of each word in your phrase. **Step 3**: Capitalize some of the letters at random and leave the rest lower case. **Step 4**: Now, substitute a number for at least one of the letters, and substitute two more letters with special characters such as an exclamation mark, asterisk, or ampersand. *Example: “You can dance if you want to you can leave your friends behind” becomes Y&d!YwtYc1Yf6* As you know, you should never share your passwords or write them down. We recommend using a password manager on your computer or phone and always having a passcode or password lock on your devices.  We've also created a handy document of [cybersecurity terms](https://blog.techboston.com/nonprofit-cybersecurity-cheat-sheet) you need to know to stay informed.  Would you like a security assessment of your current IT environment? Could your staff use training on best practices to keep your organization safe?  Tech Networks of Boston offers in-person cybersecurity trainings for staff, [IT Security Assessments](https://techboston.com/our-services/security-assessment-2/), and [Security Awareness Training](https://techboston.com/our-services/phishing-testing/). [Contact us](mailto:sales@techboston.com) to discuss different ways that we can help make your business more secure.    *This post was originally published in October of 2018 and updated in February 2021.* Share Post - - - - - [mailto:?body=https://blog.techboston.com/5-security-tips](mailto:?body=https://blog.techboston.com/5-security-tips) [Previous](https://blog.techboston.com/takeaways-from-the-b-corp-champions-retreat-in-new-orleans) [![](https://blog.techboston.com/hubfs/Final_CissaBlog_Banner-1.png) Takeaways from the B corp champions retreat in new orleans](https://blog.techboston.com/takeaways-from-the-b-corp-champions-retreat-in-new-orleans) [Next](https://blog.techboston.com/giving-back-on-givingtuesday) [![](https://blog.techboston.com/hubfs/gt.site-banner2.png) Giving Back on #GivingTuesday](https://blog.techboston.com/giving-back-on-givingtuesday) #### RELATED POSTS IT security [![Why Spam Filtering Matters](https://blog.techboston.com/hs-fs/hubfs/spam%20filtering.png?width=387&name=spam%20filtering.png)](https://blog.techboston.com/spam-filtering) #### Why Spam Filtering Matters April 20, 2023 at 08:00 AM by Veronica Moreno-Nestojko … secure passwords , IT security [![Using a Password Manager](https://blog.techboston.com/hs-fs/hubfs/password%20manager.png?width=387&name=password%20manager.png)](https://blog.techboston.com/password-manager) #### Using a Password Manager March 23, 2023 at 11:18 AM by Veronica Moreno-Nestojko … IT security [![Understanding How Least Privilege Can Help Your Organization](https://blog.techboston.com/hs-fs/hubfs/least%20privilege.png?width=387&name=least%20privilege.png)](https://blog.techboston.com/least-privilege) #### Understanding How Least Privilege Can Help Your Organization February 23, 2023 at 10:23 AM by Veronica Moreno-Nestojko … IT security [![What You Need to Know About Cyber Insurance](https://blog.techboston.com/hs-fs/hubfs/cyberinsurance.png?width=387&name=cyberinsurance.png)](https://blog.techboston.com/cyber-insurance) #### What You Need to Know About Cyber Insurance October 20, 2022 at 04:12 PM by Veronica Moreno-Nestojko … ### Leave a Reply [![updatedblogad](https://blog.techboston.com/hs-fs/hubfs/updatedblogad.png?width=312&name=updatedblogad.png)](https://techboston.com/about-tnb/contact-us/)                    ### Contact Us 1 Wadleigh Place South Boston, MA 02127 Phone: 617.269.0299 Fax: 888.527.9333 ### GET UPDATES ### Resources [Server Failure and Recovery](https://techboston.com/resources/server-failure/) [Plan a Successful Email Migration to the Cloud](https://techboston.com/resources/email-migration/) [How to Align Your Staff on Technology Use and Policies](https://techboston.com/resources/technology-policies/) [Data Loss and Recovery: A Guide](https://techboston.com/resources/data-loss-recovery/) [Assess Your IT Needs: Is an MSP Right For You?](https://techboston.com/resources/assess-it/) [IT Audits and Assessments: What Are They Good For?](https://techboston.com/resources/it-audits-assessments/) [The Right Time to Change Your MSP](https://techboston.com/resources/change-msp/) [Privacy Policy](https://techboston.com/privacy-policy/) © 2021 Tech Networks of Boston