Your Personal Security Action Plan

Building Your Security Habits

Security doesn’t have to be overwhelming. Implement these measures in order of priority and you’ll be significantly more secure than the vast majority of people.

Immediate Actions (Do This Today)

1. Enable 2FA on your email accounts — use an authenticator app, not just SMS.
2. Enable 2FA on all important accounts — banking, social media, shopping.
3. Check haveibeenpwned.com — change passwords for any breached accounts.
4. Install a password manager — Bitwarden is free and excellent.
5. Install an ad blocker — uBlock Origin for your browser.
6. Ensure your devices have updated antivirus — enable Windows Defender or equivalent.

This Week

1. Update the operating systems and software on all your devices.
2. Change any reused or weak passwords to unique, strong ones via your password manager.
3. Back up your important files (photos, documents) using the 3-2-1 rule.
4. Review browser extensions — remove any you don’t recognize or use.
5. Check connected apps in your Google, Apple, and Facebook accounts — revoke access to unused apps.

Ongoing Habits

• Pause before clicking any link in an email or SMS — apply the SLAM method.
• Verify unusual requests via a separate communication channel.
• Keep software and devices updated promptly.
• Use a VPN on public Wi-Fi.
• Review your accounts periodically for unauthorized activity.
• Change your router’s default password and update its firmware.
• Stay informed — follow reputable cybersecurity news sources to learn about new threats.

For Your Organization

• Advocate for and participate in regular cybersecurity training.
• Report suspicious emails to your IT/security team rather than ignoring or deleting them.
• Follow a “verify first” policy for any financial requests or credential changes.
• Know your organization’s incident response plan — who to call if something goes wrong.

The Mindset Shift

Cybersecurity is not a product you buy — it’s a habit you build. The most expensive security software in the world won’t protect you if you click a malicious link. But an aware, skeptical mindset combined with good security habits makes you an extremely difficult target.

Criminals go for easy targets. Be a hard one.

Quick Reference: Red Flags Checklist

• ☑ Unexpected urgency or deadlines
• ☑ Requests for secrecy
• ☑ Unusual sender email addresses
• ☑ Requests for gift card payments
• ☑ Someone you’ve never met recommending investments
• ☑ Unexpected attachments or downloads
• ☑ Pop-ups warning of viruses or asking you to call a number
• ☑ Deals that seem too good to be true
• ☑ Requests to install remote access software
• ☑ Pressure to bypass your organization’s normal procedures