Page 72 - ASPRI 2122 v2

DIRECTORY OF SINGAPORE PROCESS & CHEMICALS INDUSTRIES 2021/2022
EVENT HIGHLIGHTS |
“To promote member’s adoption of Digitalisation, Innovation and Technology so as to enhance their productivity and competitiveness”
Digitalisation, Innovation & Technology Adoption (DITA)
ASPRI X AISP CAAP AWARENESS WORKSHOP: MANAGING CYBER RISKS IN A DIGITAL WORKSPACE
W ith more companies adopting work- from-home (WFH) arrangements, the dependence on technology and the Internet has increased significantly. While technology allows us to correspond and communicate easily with our colleagues and business partners, it also exposes us to the risk
of cyber-attacks.
As part of its Cybersecurity Awareness and Advisory Programme (CAAP), ASPRI in partnership with the Association of Information Security Professionals (AiSP) organised a webinar titled, “CAAP Awareness Workshop: Managing Cyber Risks in a Digital Workspace”, on 12 October 2020.
Mr Steven Nah, Co-Lead of ASPRI’s Digitalisation, Innovation and Technology Adoption (DITA) Work Group and Treasurer of ASPRI’s 13th Executive Council, opened the webinar by sharing his thoughts on how the Internet has not only become an essential means to connect with family and friends it is also an integral tool in our work lives.
Following the introduction, Mr Tony Low, Co-Chair of AiSP CAAP spoke about the benefits and risks of using cloud services such as the iCloud, Google Drive and Google Photos, which have enjoyed stronger take-up because of COVID-19. He noted that cloud services allow users easy access to their files from anywhere with an Internet connection and they negate the
need for complicated physical storage devices that take up space whether in the office or at home. However, there are risks in using cloud services such as data privacy, insider threats and compliance violations.
To safeguard against cyberthreats, Mr Low emphasised the need to have strong passwords. He advised against the use of the same password for different services, or the use of personal information such as name, birthday, or mobile number as passwords. Instead, he recommended the inclusion of special characters such as punctuation marks to make it harder for hackers to crack passwords to gain entry.
In the final section of his presentation, Mr Low explained the term “Social Engineering”. Social Engineering, he said, occurs when someone develops personal relationships which he then uses as a tool to gain access to protected information or materials through eavesdropping on conversations, peering over someone’s shoulder to view passwords, or even reading confidential documents left out in the open on a desk or a workstation.
During the Q&A session following the presentation, ASPRI members took the opportunity to clarify their concerns and doubts.
66