Staying Secure 03 November 2020 MedicAlert Our digital world is filled with an increasing number of security threats, but also an increasing number of security measures to help stay safe. It can certainly get complicated and seem a bit daunting but with just a little bit of know-how and just a little bit of precaution, we can all stay safe. Companies that hold personal information are law, and duty, bound to provide protection against any security threats. MedicAlert takes this responsibility with the utmost seriousness and we ensure that we not only meet all security requirements, but we do so to the highest possible standard. However, whilst such companies have this responsibility, service users (that’s all of us!) are advised to make themselves aware of how to stay safe too. When it comes to security threats in the digital world that we, as consumers, should be aware of, there are 2 key areas: Scam calls These are typically phone calls where the caller is trying to encourage you to disclose personal information that they can then exploit, in most cases for financial purposes. These calls may take the form of a pretend call from a bank, your internet service provider, or an organisation you regularly make a payment to. They may ask for access to your computer by convincing you to install a piece of software, or tell you a payment is due and they will only take payment details over the phone. No matter what form the call takes, an unexpected call from someone asking for your personal information should ring alarm bells. Phishing emails and text messages In contrast to receiving a call, texts and emails can be a little harder to spot as not being genuine, especially if you are not as familiar with these communications methods. These are usually innocent looking messages that you might think are familiar (after all, they’re designed to look like a normal communication from the companies you use) but ultimately direct you to fake or malicious websites. As a charity organisation, we are acutely aware of the dangers of the above and so we work hard to maintain the highest level of security. What does MedicAlert do to ensure security? At MedicAlert we take digital security, and the security of our members, very seriously. So much so that it’s worth repeating: We take the security of our members very seriously. So what exactly do we do that supports our intentions? Our approach is not complex because it doesn’t need to be. Our approach is good, old fashioned common sense and it involves the following: Continually identifying improvements and opportunities to increase the level of our security One of the ways we do this is by reviewing the market for new security services. Part of this means working closely with IT, payment and system providers to ensure we work with those providing the highest level of security. In a world that does not stay still, it’s important that we keep moving too. Providing thorough staff training All of our staff regularly undertake training so as to remain aware of the most effective ways of keeping your data secure. Our training courses include topics such as: dealing with phishing emails, network security and communications. Maintaining Cyber Security across all our systems At MedicAlert, we are proud to have been awarded the Cyber Essentials Plus certification. This is a government-backed scheme run by the National Cyber Security Centre, built around a robust validation process. That means that certification is only provided when a variety of specific security measures are achieved, including: Network security Updates installed in a timely manner Security procedures in place All servers are supported We are also registered with Action Fraud, the UK’s national reporting centre for fraud and cybercrime run by the City of London Police in partnership with the National Fraud Intelligence Bureau. This means that if we are made aware of any fraudulent activity, or if we have experienced any kind of scam, fraud or cybercrime, we register each case with Action Fraud. How to be sure you’re talking to MedicAlert. You should feel confident about communicating with MedicAlert. We know, however, that sometimes it can be hard to spot the good guys versus the bad guys, so the following may help you know when it is us you’re talking to! Any letters we send to you by post will be printed with the company letterhead; All centralised email communications will come from our main email addresses (info@medicalert.org.uk or marketing@medicalert.org.uk); If we call you, we will start the call with a security check that allows us to verify who you are and part of this involves asking you to confirm specific details you provided when you became a member. It will also allow you to determine the legitimacy of our call because you will expect only us to have that specific set of information, followed by the reason we are calling. If we call you and you are unsure that you are really talking to MedicAlert, just let us know you’d like to terminate the call. You can then call us back using the phone number printed on any documentation we’ve sent you or on the website. Your security and reassurance is a key priority in our approach to digital security. What can you do to stay safe? With all of this in mind, what are the practical and reasonable steps that you can take to help stay as secure as possible? Like MedicAlert, you too can register any calls or other communications you believe to be fraudulent with Action Fraud. By doing this you will not only be directly helping yourself but also contributing to the ongoing safety of others. Be suspicious rather than trusting! This is arguably the most important part of the fight to stay secure. If ever in doubt, ask for further proof of who the other party is and why they want communication with you. Given that the 21st century is thoroughly a digital environment there are a number of things you can do to help stay on top of your own security game when you’re online. Here are some quick and easy tips for your general digital security and safety: Randomise passwords – try to keep the passwords for the different services you use different and non-logical. A password like Orange01! is simple to crack, but a password like 0fhy7&&asd! is far more unpredictable. You can use a service like Lastpass to safely record all your passwords and the magic of a tool like that is that you simply need to click a couple of buttons and bingo, you’re safely logged in. Limit the level of honest detail you provide in your protection answers – this is, hopefully, a very obvious one but important to remember nonetheless. Passwords containing names, birthdays and/or address details like your street or town should be big no-nos. Pay attention to the emails you receive – there are many fraudsters out there who know how to make an email look like it’s a real one from your bank or from your favourite commerce website. They do this to try and convince you to provide them with your personal details (usually financial) or to sneakily place malware on your computer. Be aware of where you enter your credit card details Keep an eye on your phone when out - don’t leave it unattended If you have a smartphone, engage its security features like automated factory reset upon a limited number of log in attempts (this will stop people trying to access your phone if you lose it) Keep your digital security, operating systems and apps up to date Don’t assume wi-fi hotspots are safe Be more suspicious than trusting - think about what you’re being asked for and take your time before making a decision to provide any personal information. Above all else, common sense should prevail. Whenever you are in doubt about your security, it is important to question it. Click below to receive the latest MedicAlert news, articles and offers directly to your inbox SIGN UP FOR NEWSLETTER Last updated: 09-04-2021 Article Categories Hints and Tips