Security

What is cyber or information security?

Cyber or information security is protecting your information and systems against unauthorised access or attacks. This includes preventing, finding and taking action when you experience a cyber-attack.

Examples include:

  • Using someone else's password to access a computer system
  • Clicking on a link that downloads malware onto your computer
  • Your social media account gets hacked
  • Redirecting One-Time-Pins to attackers
  • Intercepting your private conversations (email or WhatsApp)

Why is it important?

Today most of us have one or multiple devices (e.g. mobile phone, tablets, laptops, personal computer) that contain personal information, from banking apps to email accounts. It’s important that we are aware of possible threats and know what to do when we are targeted so that we can protect ourselves and our families.

Where can I report it?

If you think or suspect that you have been targeted, or are a victim of fraud or unethical behaviour, please report it using one of the following methods:

  • Tip-offs anonymous using toll free number 0800 222 117
  • Email toahotline@tip-offs.com
  • Visit www.tip-offs.com (This anonymous service is provided by Deloitte - a multinational auditing and accounting firm)
  • Alternatively, please email Old Mutual Group Forensic Services (GFS) on gfs@oldmutual.com

Passwords

Passwords and pin codes are the gateway to our electronic accounts and devices. They protect our information, our homes and our hard earned money. Having a strong password is vital to secure your online identity and assets.

  • Use a combination of uppercase, lowercase, special characters and numbers
  • Consider using a password phrase, with a number and emoji at the end.
  • Longer passwords are harder to crack use 8 or more characters
  • Never share your password or pin with anyone
  • Use two-factor authentication as an extra layer of protection

e.g. I love New York City today! = IlNYC2day! Or a line from a song with a number and emoji: e.g: “I bless the rains down in Africa”. = IbtrdiA20:)

What is two-factor authentication?

It is the two-step verification process, in order to login into an account or system. This is the use of 2 types of information to secure one’s online accounts. The first factor being a password which is something you know and the second factor proves something that you have or own e.g. a cell phone or security token.

So if a criminal were to get hold of your password they would also need the device which receives your two-factor authentication code. This is recommended for critical accounts such as email and banking.

Examples of Two-factor Authentication (2FA)

  • One-time password (OTP) – An OTP is only valid for one transaction or login. You will receive this via sms, email or a specific app when completing a transaction or login. There are plenty of options available on your app store to download and link it to the account you wish to secure with 2FA.
  • Call – Some service providers such as Microsoft or your bank offer verification services whereby you receive a call with an OTP.
  • SMS – Think about when you pay for something online and you have to verify the payment by entering a code you receive via SMS.
  • Push notification – The push notification is received via an app linked to an online platform. Some banks offer this option.
  • Email – When it comes to online payments you can have the option to receive the OTP via email instead of SMS.