Welcome to Developing Cyber Security Awareness for All Ages

This program has been designed to help people of all ages build the knowledge and confidence needed to reduce cyber security risks in everyday life. The workshop will be delivered at public events, community gatherings, and will also be available through our website, ensuring broad and accessible participation across the community.

What You Will Learn

• Multi-Factor Authentication (MFA): Understanding why an extra layer of protection is essential for securing online accounts.
• Creating Strong Passphrases: Learning how to create and manage unique, strong passphrases to protect personal and financial information.
• Identifying and Recognising Online Scams: Building skills to recognise phishing attempts, fraud, and common online scams.
• Safe Internet Practices: Learning how to safely use public Wi-Fi, manage privacy settings, and reduce online risks.
• Engaging Family and Friends: Encouraging conversations about cyber safety to support safer online behaviour across all age groups.

Importance of Multi-Factor Authentication

Multi-factor authentication (MFA) is an essential security measure in our digital lives today. By requiring not just a password but also a second form of verification, MFA significantly reduces the risk of unauthorised access to your online accounts.

MFA requires you to verify your identity in two or more ways when logging into your account. After entering your passphrase, you'll be prompted to enter a verification code. This could come from an authenticator app, or as a text or email message. Because MFA adds another layer of security, it helps protect your accounts even if your password is compromised.

Types of Multi-Factor Authentication

• SMS Codes: Receive a unique code via text message. While convenient, SMS-based MFA can be vulnerable to interception, so it's wise to combine it with other methods where possible.
• Authentication Apps: Apps like Google Authenticator or Authy generate time-sensitive codes. This method is generally considered more secure than SMS codes because the codes are generated on your device.
• Security Tokens: Physical devices that generate login codes. This method is very secure as it requires physical possession of the token.

Creating Strong Passphrases

A strong passphrase is your first line of defence against cyber threats. Unlike traditional passwords, passphrases use a series of random words or phrases that are more complex yet easier for you to remember.

Password Management Tools

Password managers encrypt your data, meaning that your passwords are stored in a protected format. This significantly reduces the risk of cybercriminals gaining access to your accounts through password theft. Password managers help by generating robust passphrases that fulfill security requirements, including at least 15 characters in length, a mix of letters, numbers, and symbols, and random combinations that are harder to guess.

Recognising Phishing Attempts

Phishing is a method used by cybercriminals to trick you into giving away personal information such as passwords or financial details. These often come in the form of fake emails, text messages, or websites that appear legitimate.

Common Online Scams

Scammers often target vulnerable individuals, including elderly people and those from non-English speaking backgrounds due to their limited familiarity with online platforms.

Signs of a Scam

• Pressure to act quickly or urgently
• Requests for payment via unusual methods (gift cards, wire transfers, cryptocurrency)
• Offers that seem too good to be true
• Requests for personal or financial information
• Threats or intimidation tactics
• Poor grammar and spelling in communications

Protecting Personal Information

Be cautious about sharing your personal details online. Ensure websites are secure (look for https:// in the URL) before entering sensitive information. Never share your passwords, PINs, or security codes with anyone, even if they claim to be from a legitimate organisation.

Responding to Scams

If you suspect you've been targeted by a scam:

• Do not respond or provide any information
• Report it to the relevant authorities
• Contact your bank immediately if financial information was shared
• Change your passwords if account information was compromised
• Talk to family or friends about what happened

Family Discussions

Encourage conversations about cyber safety within families. Share your online experiences and discuss how to stay secure online. Create an environment where sharing knowledge about cyber safety is normal, and remind everyone that asking questions and sharing concerns is vital in keeping all household members informed and protected.

Understanding Privacy Settings

Regularly review and adjust your privacy settings on social media platforms and other online services. Limit who can see your personal information and posts. Be mindful of what you share publicly, as this information can be used by scammers.

Public Wi-Fi Risks

Public Wi-Fi networks are convenient but can pose security risks. Cybercriminals can intercept data transmitted over unsecured networks, potentially accessing your personal information, passwords, and financial details.

Safe Wi-Fi Practices

• Use a VPN: A Virtual Private Network (VPN) encrypts your internet connection, making it difficult for cybercriminals to intercept your data.
• Avoid Sensitive Transactions: Steer clear of logging into accounts that contain sensitive information when on public Wi-Fi, including online banking, personal email, or social media.
• Verify Hotspots: Before connecting, verify the network name with staff or look for official signage. Cybercriminals often set up fake hotspots with names similar to legitimate ones.
• Keep Security Software Updated: Ensure your devices have up-to-date security software, including firewalls and antivirus programs.
• Disable File Sharing: Turn off file sharing on your devices when connected to public Wi-Fi.

Identifying Secure Connections

When navigating the online world, recognising secure connections is essential for protecting your personal information. Secure websites will begin with HTTPS rather than just HTTP. The S signifies that it is secure and that data transmitted between your browser and the website is encrypted.

Look for a padlock icon in the address bar of your web browser. This symbol indicates that the connection is secure. Always double-check this icon before proceeding with actions such as online shopping or banking.

Family Discussions on Safety

Engaging in conversations about online safety within families is crucial for building a supportive environment where everyone feels empowered to navigate the digital world securely. Encourage family members to share their online experiences and discuss how to stay secure online. Make it a habit to have regular discussions about internet safety, perhaps during family dinners or casual catch-ups.

Create an environment where sharing knowledge about cyber safety is a norm. This could include discussing how to adjust privacy settings on social media, understanding the importance of strong passwords, and recognising signs of scams. Utilise stories or examples from your own experiences or news reports to illustrate the potential risks of online activities.

Course Summary

Congratulations on completing the course! You've taken a great step towards improving your online security skills, especially as a part of the CALD community. This workshop was designed to empower you with essential knowledge and practical skills to navigate the online world safely.

Key Objectives Achieved

By the end of this course, you should now be able to:

• Understand the importance of multi-factor authentication for online account security, ensuring that your accounts have an extra layer of protection against unauthorised access.
• Create and manage strong, unique passphrases for each of your online accounts, helping to prevent password-related breaches and hacks.
• Recognise the signs of online scams and understand the steps you can take to protect your personal information, making you more vigilant against cyber threats.
• Implement safe practices when using public Wi-Fi and manage your privacy settings effectively, reducing the risk of data breaches while accessing the internet in shared spaces.
• Engage in discussions with family and friends about maintaining online security, spreading awareness and best practices in your community.

What To Do If Something Goes Wrong: Reporting and Recovery

If you experience a scam, fraud, or cyber incident: report it as soon as possible. Contact your bank or financial provider if money is involved. Report scams to Scamwatch. Change passwords for affected accounts, monitor your accounts for unusual activity, and seek support (e.g. IDCARE for identity theft). For a full step-by-step guide, see Everyday Cyber Security: Practical Steps for Australians (Reporting and Recovery lesson).

Further Resources

If you would like to find out more information about cyber security awareness, you can visit:

• actnowstaysecure.gov.au
• Cyber Security Awareness Resources - Digital NSW
• Scamwatch.gov.au
• Everyday Cyber Security: Practical Steps for Australians (full 7-lesson course PDF)