Be discreet: only disclose when necessary

Firstly, check the information that is publicly available about your business:

• Use different search engines to see what you can find online
• Make sure that your information is accurate and up to date. If it isn't, or you find something that should not be in the public domain, contact the website to see how to update or delete it.
• Be careful about sharing too much internal information, cybercriminals might be able to use it to commit fraud.

• Data classification: classifying the company's information can help to understand who should and shouldn't have access to it. The following labels can serve as a reference: public, internal and confidential.
• Data handling: establishing clearly how to handle, store and share information is another way of helping to protect it. For example, private information when shared via email should be password protected, with the password provided via a separate channel, such as over the phone or via SMS.
• Social media: a brief guide for employees about how to speak about the company online will make it clear to them, and make them confident, about how to be brand ambassadors.