You are here:

Home
adidas

#BETHEKEEPER

adidas

#BETHEKEEPER

Cyber crime is real!

It’s predicted that by 2021 cybercrime will cost the world a figure in excess of $6 trillion.

Malicious hackers are now attacking computers and networks worldwide at a rate of one attack every 39 seconds. Over 1.3 billion social media users have had their data compromised within the last five years.

To be ahead of the game in the digital world we need to protect our brand, our designs, innovations and our valuable data!

Therefore we need you to #bethekeeper of our information and together build our first line of defense. The right technologies are crucial, but it’s your daily contribution that makes a difference!

Password security

Best practices for Password Security at work and at home!

Best practices for password security (not only for work purposes!):

Always use a strong password, consisting of at least ten characters and containing at least three of the following character types: Upper case, lower case, numbers, special characters (e.g. !, $, ?...).
If you believe your system has been compromised, change account passwords immediately and notify the adidas CSIRT (Computer Incident Response Team).
Keep your password secret. Do not share your password with anyone.
Use distinct passwords for different purposes and service providers.
Use a password management tool to manage your passwords for numerous online websites and business applications. @adidas get LastPass Password Manager via ASPEN or 123.

Phishing

The fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers.

How do you recognize it?

It creates a sense of urgency
It often shows grammar or spelling mistakes
The source email addresses: The e-mail appears to come from a legitimate organization, but the "FROM" address is someone's personal account (such as @gmail.com).
The "TO" and "CC" fields: The email is being sent to people you do not know or do not work with
It uses a generic salutation

Best practices for Phishing Security

Forward an e-mail only if it is appropriate for the recipient. Double check the recipient(s) before sending.
Consider deleting the history of the message before doing so.
Report suspicious e-mails via the outlook reporter button
Don’t open e-mails and attachments from unknown sources
Don’t click on any hyperlinks contained in a suspicious email

Multi-factor authentication

What are we talking about?

Multi-factor authentication (MFA) is a service that adds additional layers of security to the standard password method of online identification. Without multi-factor authentication, you would normally enter a username and password. But, with multi-factor, you would be prompted to enter at least one additional authentication method such as a Personal Identification Code, another password or even fingerprint.

Why should you use it?

Its purpose is to make attackers’ life harder and reduce fraud risks. If you already follow basic password security measures, multi-factor authentication will make it more difficult for cyber criminals to breach your account.

Types of authentication factors

When it comes to MFA, we typically refer to three types of authentication factors:

Things you know (knowledge), such as a password or PIN
Things you have (possession), such as a badge or smartphone
Things you are (inheritance), indicated through biometrics, like fingerprints or voice recognition

Protecting sensitive information

Ensure Information stays within the defined recipient group.
Put Non-Disclosure-Agreements (NDAs) in place, if Information needs to be shared outside adidas.
Consider encryption for electronic sharing of Information externally.
Apply a clear desk policy at your working desk.
Lock your computer, if your away from your desk.

Get familiar with the different Information Classes at adidas.
Information is:

“PUBLIC" if it can be disclosed to any person inside or outside adidas without any financial, reputational, or legal risk.
“INTERNAL” if its disclosure to any inappropriate audience exposes adidas to additional risk, even if marginal.
“CONFIDENTIAL” if its disclosure to any inappropriate audience exposes adidas to a High or Significant Risk.

Best practices to Protect Sensitive Information

Never share personal details, passwords or bank details
Store/process adidas information on corporate devices or applications only
Be aware that conversations can be overheard. Protect your organization’s confidential information.
Protect yourself against shoulder surfing: A technique used to obtain information such as passwords and other confidential data by looking over the victim's shoulder.
Dispose physical Information in a secure manner (e.g. document shredder, secure paper bin)

Mobile security

Nowadays, our mobile devices are constant companions, carrying with them a wealth of valuable data such as chats, banking details and emails - it’s important we do everything we can to ensure their security.

You can take a few steps to meaningfully improve your mobile security, whether we’re talking about your mobile phone, laptop or tablet:

Lock your device when not in use
Never leave your mobile device unprotected in public
Avoid using portable storage devices, use OneDrive cloud storage instead
Only install apps from trusted sources
Keep your operating system updated
Don’t charge your device using public USB ports
Use company VPN while accessing internet through public Wi-Fi

Social engineering details

A form of techniques employed by cybercriminals designed to lure unsuspecting users into sending them their confidential data, infecting their computers with malware or opening links to infected sites.

How do you recognize it?

Criminals often pretend to be IT staff as a pretext to access your systems
If you receive an unsolicited call from a stranger claiming to be tech support, it is very likely you are being one of their targets
To bypass your rational thought process social engineers might even create a false sense of urgency and/or helplessness
Fear can be a powerful motivator. Social engineers and other scammers take advantage of this fact. They use fear, whether it's fear of getting someone in trouble or fear of not meeting a deadline.

Best practices for Social Engineering Security

Never give out any confidential information about yourself or your company whether it’s over the phone, online, or in-person, unless you can first verify the identity of the person asking and the need for that person to have that information
If in any doubt of the communicator's identity, delay any immediate action. Re-establish communication later using contact methods that you have sourced yourself
In case you had a suspicious encounter, immediately notify the Cyber Security Incident Response Team

Facts

adidas

#BETHEKEEPER

Cyber crime is real!

Password security

Best practices for Password Security at work and at home!

Phishing

How do you recognize it?

Best practices for Phishing Security

Multi-factor authen­tication

What are we talking about?

Why should you use it?

Types of authentication factors

Protecting sensitive information

Best practices to Protect Sensitive Information

Mobile security

Social engineering details

How do you recognize it?

Best practices for Social Engineering Security

Multi-factor authentication