YT YouTube2Text

YouTube2Text → Transcripts → Employee Laptop Security Awareness Training - How to Protect Corporate Data

Employee Laptop Security Awareness Training - How to Protect Corporate Data — Transcript

by DPO Solutions (Paul Rogers Security) · 2,274 words · 381 segments · language en · Watch on YouTube

Open in transcriber Summarize with AI Download SRT/VTT

Full transcript

0:01Hello, my name is Paul and welcome to
0:03this laptop security training for
0:05employees. In this course, I cover six
0:08sections of laptop security, including
0:10general security risks, hard drive
0:12encryption, passwords, Wi-Fi security,
0:16general good practices, and webcam
0:18security. I hope by the end of this
0:20training, you'll be aware of the most
0:22common risks, and take steps to secure
0:24your device in the workplace and in the
0:26home. But before we start, please take a
0:29moment to subscribe to the channel and
0:31consider liking the video if you find it
0:33useful.
0:43From a security standpoint, laptops will
0:45always be of particular concern to
0:47businesses and employees because of
0:49their mobility and storage capabilities.
0:52Given their portability and the fact
0:54that they can often hold terabytes of
0:56data makes them vulnerable to loss or
0:58theft and hacking through channels such
1:00as public Wi-Fi attacks.
1:03Laptop loss and theft is one of the
1:05leading causes of data breaches which
1:07are often reported in the news alongside
1:09a company name affected by the loss.
1:12This can lead to a loss of public trust
1:14in the company and fines if it's deemed
1:16that the laptop was not properly
1:18protected through technology such as
1:20encryption, which we'll look at.
1:27Over 600,000 laptops are reported lost
1:30or stolen in US airports alone every
1:33year with millions more going missing in
1:35coffee shops, libraries, public
1:37transport, and personal vehicles.
1:40Fortunately, there are some ways to
1:42prevent device theft and help recover
1:44devices if they are gone. The best
1:47method to physically secure your laptop
1:49is through the use of a Kensington style
1:51lock to tether laptops to fixed objects
1:54for short periods of time when away from
1:57your workspace.
1:59Most laptops have a Kensington slot or
2:01Klot as it's known for which security
2:04cables can be used to attach to. This
2:07provides a good level of physical
2:09security.
2:10The next piece of advice is to ensure
2:12your laptop is identifiable with
2:14security asset tags. The best ones to
2:17use are RFID capable ones, which can be
2:20active or passive type depending on your
2:23budget. You may also use the more common
2:26tamperresistant polyester tag, which are
2:29cheapest, but are also effective,
2:31particularly when authorities are
2:32looking to return lost and stolen
2:34laptops.
2:39Laptops should not be left visible and
2:41unattended on car seats or parcel racks
2:44and should instead be placed in the boot
2:46out of view. Thieves regularly try doors
2:49and smash side windows in order to grab
2:51laptops as a form of opportunistic
2:53theft. In some cases, it may even be
2:56more than opportun opportunistic theft
2:59in that cyber criminal criminals may
3:00target theft of devices from particular
3:03individuals or companies that they plan
3:05to steal data from. This can occur in
3:08company parking lots and assigned
3:10parking spaces which employees need to
3:13be aware of. For extra security, Windows
3:16users should set up facial recognition
3:19through the Windows Hello F fe future.
3:22The system will conduct a biometric scan
3:24which captures your face's unique
3:27geometry
3:28like the distance between your eyes,
3:30nose, and mouth and then create a
3:32template for future login which is uh
3:34highly secure.
3:36If this feature isn't available, then
3:38consider using hardware keys or devices
3:40fitted with fingerprint readers. These
3:43systems are much more robust than uh
3:45using a password on its own as passwords
3:47are becoming easier to crack with
3:49quantum powered computing power and
3:52tools.
4:02Drive encryption is perhaps the most
4:04important security setting which should
4:06be enabled on work and personal laptop
4:08drives. It prevents data on your drive
4:11and its contents from being read if
4:13[clears throat] your device falls into
4:14the wrong hands. Drive encryption is
4:17required by many industry regulations
4:19and standards as a method for protecting
4:22personal, health and financial data,
4:24particularly when there are thousands of
4:26customer records or personal records
4:28involved.
4:29There are many hardware and software
4:31methods for encrypting drives on the
4:33market including chipbased self-
4:35encrypting drives and native operating
4:38system solutions like Windows Bit Locker
4:40and Mac File Vault.
4:43The main benefit of drive encryption is
4:45the high degree of difficulty in
4:47accessing data on a drive without proper
4:49credentials.
4:51Most encryption algorithms use AES-256
4:55encryption which is a still an
4:57unbreakable standard where hackers are
5:00unable to crack today.
5:02Hardware encryption is preferred over
5:04software methods as its performance is
5:06superior to software and less CPU
5:09intensive.
5:11If you're setting up encryption for the
5:13first time, it's critical to perform a
5:15full backup of your of your data before
5:17initiating the process and backing up
5:19your encryption keys in a secure vault
5:22or in a password manager in case you
5:24lose access to your encrypted data. If
5:27you lose your passphrase and backup key,
5:29you will lose access to all your data.
5:39Choosing a strong password is one of the
5:41most important methods of keeping
5:43hackers out of your devices and online
5:45accounts. Studies have shown that 58% of
5:49passwords are crackable in an hour with
5:52common hacking tools like John the
5:53Ripper uh combined with the power of
5:56cloud computing. This means that you
5:59need to use stronger and longer
6:00passwords which are not so easy to
6:02defeat with common attack methods.
6:05Experts recommend that passwords need to
6:07be at least 16 characters in length. uh
6:10with password complexity involving a
6:12combination of upper and lowerase
6:14characters, numbers, and non-alpha
6:17numeric characters.
6:20Experts also recommend using past
6:22phrases using unrelated word
6:24combinations such as the these three
6:27word uh character examples
6:30water locomotive hurry or then another
6:33one would be creatur trees hire which
6:36are long but easier to remember than one
6:39long string of unpronouncable letters
6:41with complex characters.
6:44The next thing to be mindful of is
6:45avoiding uh certain practices with
6:47passwords. This includes things like not
6:50reusing your laptop login password
6:53across uh your other online accounts.
6:56This is a common mistake by users out
6:58there where some estimates place the
7:01amount of password reuse by 78% of the
7:04user population which is quite
7:06astonishing. The problem here is that if
7:09one of your per online personal accounts
7:11is hacked in a data breach, you may be
7:14opening the door for hackers to try your
7:16work laptop password and other accounts
7:18and then log in successfully.
7:21The next things to avoid are using
7:23similar passwords when changing your
7:25password and using personal details,
7:28number sequences, and terms like pass
7:31123, login, security, and let me in as
7:35part of your password composition
7:37strategy. Hackers will often use your
7:40personal information and common password
7:43terms as part of their hacking strategy
7:45when trying to break into machines. So,
7:48it pays to be aware of the risks and
7:50take the extra steps to be mindful of
7:52complex passwords.
7:57Now, let's test your knowledge real
7:59quickly. So, this question is which
8:02password is stronger?
8:07The answer is C as it's a passphrase
8:10phrase which is actually in this case 18
8:13characters long when you include the
8:15spaces. The others are shorter than 16
8:18characters and use terms like password
8:21and names and place names in the
8:24composition.
8:32Wi-Fi connectivity is another major risk
8:35for laptop users as it may present an
8:37opportunity for nearby hackers to get
8:40onto your system and steal your personal
8:41data. So, here are a few guidelines to
8:44help you secure your Wi-Fi on your
8:46laptop.
8:47Number one would be never to connect to
8:50public Wi-Fi networks as found in coffee
8:52shops, libraries, airports, etc., as
8:55hackers can listen into Wi-Fi traffic
8:58and potentially any data you send or
9:00receive.
9:01Be also careful of a Wi-Fi networks with
9:04no security setting as they can often be
9:07set up by attackers in order to bait you
9:09into connecting to an open Wi-Fi network
9:12and stealing your data. Next, use
9:15trusted private Wi-Fi networks with
9:18strong passwords and encryption
9:19standards like WPA-3.
9:23Ensure these passwords are not default
9:25ones such as ones found in the outside
9:26label of a broadband router. You do need
9:29to change default passwords on any
9:32broadband routers that you use in the
9:33home as hackers can easily find default
9:36passwords on the uh internet on dark web
9:39lists.
9:41Next, use authorized VPN software when
9:44connecting over the internet into your
9:46work uh based systems and when working
9:49with confidential data. Then for home
9:53router configuration, ensure that your
9:55SSID number is hidden and that you
9:58enable MAC address filtering which uh
10:01only allows authorized devices to
10:03connect into your broadband router. And
10:06then finally, ensure your laptop Wi-Fi
10:08software is kept up to date to regular
10:12operating system patching.
10:21So, let's focus here on some laptop good
10:24practices. It's not a good idea to have
10:26multiple users using your work laptop as
10:29the device inevitably becomes more
10:31vulnerable to compromise.
10:34It's not uncommon that other family
10:36members may use your laptop for
10:37nonwork-related activities like
10:39downloading games and free software
10:42which could introduce malware to your
10:44device leading to data loss, identity
10:47theft, and other highly imp impactful
10:49issues.
10:51It's often said by experts that good
10:52security is only as effective with good
10:55maintenance processes and user
10:57vigilance. So, it's important to apply
10:59security software updates, browser, and
11:02desktop application updates as soon as
11:05prompted to do so on your desktop.
11:08While it's often inconvenient to reboot
11:10computers and browsers, ignoring these
11:12prompts or bypassing updates can lead to
11:14exposure to new malware threats like
11:17ransomware and key loggers, which arise
11:20all the time.
11:25Another good practice of course is to
11:27have a good uh data backup strategy
11:30which is really your primary defense
11:32against instances of system failure or
11:34cyber attack.
11:36Best practice calls for a local and a
11:39cloud-based backup schedule for data on
11:41your laptop.
11:43Local backups can be facilit facilitated
11:46through a mirrored drive or a directly
11:48connected external drive. Cloud-based
11:50backup offerings are provided by several
11:52vendors which offer one-touch data
11:55restore options.
11:57A good approach to backups is to set
11:59automatic weekly full backups with daily
12:02incremental backups on local and cloud
12:05storage locations.
12:07As another matter of good practice,
12:09secure deletion of data can be concern
12:12when frequently looking to delete
12:13sensitive and confidential documents on
12:16your drive. Normal recycle bin
12:19operations do not fully delete files
12:22which is why there are specialist
12:24programs which can fulfill this task
12:26like using programs like eraser file
12:28shredder or free eraser for Windows and
12:32then the secure empty trash method for
12:34Mac. These programs effectively wipe the
12:37data by overwriting it as opposed to
12:39just deleting a file name in the file
12:41system.
12:43It's also important to remember that
12:44laptop drives and removable drives must
12:47be securely dis disposed of when they
12:49are being retired out of use. They
12:52should not be disposed of by simply
12:54placing them in normal uh bins. Instead,
12:57several solutions such as drive
12:59degasing, drive shredding should be
13:01employed either by you or by a
13:03contracted company.
13:13Webcams are also a common target for
13:16hackers who have been known to remotely
13:18enable integrated cameras and USB
13:20connected cameras on laptops for the
13:23purposes of spying, even blackmailing,
13:26eavesdropping, and taking pictures for
13:28the purposes of identity theft later on.
13:32Hackers commonly use remote access
13:34Trojan malware or AT malware like dark
13:38comet and venom rat to facilitate their
13:41activities.
13:42This malware regularly gets installed
13:44via fishing emails and from infected
13:47file downloads from the web and may also
13:50include other nefarious functionalities
13:52such as keystroke monitoring monitoring
13:55to track passwords and other
13:56confidential data being entered on your
13:59keyboard.
14:00Many personal laptop webcam feeds have
14:03also appeared on internet search engines
14:05like Showdown, which regularly scans
14:08internet connected devices for open
14:10video streaming ports such as your
14:11webcam. So, you'll probably see by now
14:14that there is a real risk related to
14:16laptop cameras.
14:18So, what can you do to protect your
14:20camera? Well, the type of solution for
14:22restricting webcam cap capabilities may
14:25depend on your level of usage. If you
14:28use the webcam infrequently, then
14:30disable disabling it in the UEFI
14:34boot settings or in your device manager
14:37may work. You may also consider
14:39unplugging any USB based webcam and only
14:43plugging it in as needed. For more
14:45casual webcam disabling, consider play
14:48displacing tape over the camera when not
14:50in use. This is something that Facebook
14:53owner Mark Zuckerberg Mark Zuckerberg
14:55does all the time, as does a former FBI
14:58director. This may sound odd, but these
15:01individuals are very aware of the real
15:03risks from webcams.
15:08So, here's our final question. Which one
15:11of these is bad practice when securing
15:13your Wi-Fi?
15:18The answer is C. using your router
15:21default password. You should always
15:23change your default password which is
15:25usually found on a sticker on your
15:27broadband router. The other items here
15:30on the list, changing your SSID,
15:32creating router MAC filters, and
15:34avoiding public Wi-Fi are always a good
15:37idea when you're using your device.
15:42So, this brings us to the end of the
15:44training here. Uh this is the re risk
15:46recap section where you can pause and
15:49look through each of these items. And
15:51then as we move on to the next slide, we
15:54have a reference slide which is uh some
15:56useful tips for you if you want to do
15:58some further research on password
16:00security or some of the other items we
16:02covered in this topic in these topics
16:04today. So, if you like this video, make
16:07sure you give it a thumbs up and then uh
16:10click on the subscribe button for future
16:13uh free course information on our
16:16channel. Again, thanks for watching and
16:18I hope to see you

About this transcript

This page contains the full transcript of Employee Laptop Security Awareness Training - How to Protect Corporate Data by DPO Solutions (Paul Rogers Security), generated from the public captions YouTube serves with the video. The transcript has 2,274 words across 381 segments, with the original timestamps preserved so you can click any line to jump to that moment in the embedded player.

What you can do with it

Use the transcript to take notes, quote the speaker, build a study guide, generate a summary with ChatGPT or Claude via the YouTube Summary tool, or export it as a timed subtitle file with YouTube to SRT. You can also re-open it in the transcriber to choose a caption track available on the video.

Free YouTube transcript tool

YouTube2Text is a free YouTube transcript generator — no signup, no daily limit. Paste any YouTube link and get the full transcript instantly, with timestamps, click-to-jump, caption language selection, AI prompts for ChatGPT, Claude, and Gemini, and exports to TXT, SRT, VTT, or Markdown.