Cyber Security Best Practice

Overview

Assessment Manager has been developed using enterprise-grade security controls to help protect organisational information. However, maintaining a secure environment is a shared responsibility between the platform provider and each organisation using the system.

Many cyber security incidents occur not because of weaknesses in software, but through compromised passwords, phishing attacks, shared user accounts, unsecured devices or human error. By following recognised cyber security practices, organisations can significantly reduce the risk of unauthorised access and help protect sensitive operational information.

This article outlines recommended cyber security practices for organisations using Assessment Manager and aligns with guidance from the Australian Cyber Security Centre (ACSC) and recognised information security standards.

Strong Password Practices

Passwords are the first line of defence against unauthorised access.

Users should:

• Create strong, unique passwords for Assessment Manager.

• Avoid reusing passwords across multiple systems.

• Use a password manager where appropriate.

• Never write passwords where they can be easily accessed.

• Never share passwords with colleagues or contractors.

Organisation Administrators should encourage good password practices across their organisation and remind users to update passwords whenever they suspect their account may have been compromised.

Protect Against Phishing

Cyber criminals frequently use phishing emails and fraudulent websites to obtain usernames and passwords.

Before entering your login credentials:

• Confirm you are accessing the correct Assessment Manager website.

• Check that your browser displays a secure HTTPS connection.

• Be cautious of unexpected emails requesting login details.

• Never click suspicious links or download unexpected attachments.

• Verify unusual requests through another trusted communication method.

If you suspect a phishing attempt, report it immediately to your Organisation Administrator or IT team.

Secure Devices

The security of Assessment Manager also depends on the security of the devices used to access it.

Where possible:

• Keep operating systems updated.

• Install security updates promptly.

• Use reputable antivirus or endpoint protection software.

• Enable device encryption where available.

• Lock devices when unattended.

• Avoid using unsupported or outdated operating systems.

Compromised devices may place organisational information at risk regardless of the security built into Assessment Manager.

Browser Security

Assessment Manager is designed to operate on modern web browsers that support current security standards.

For the best security and performance:

• Use the latest version of your preferred browser.

• Enable automatic browser updates.

• Clear browser cache periodically.

• Avoid installing unnecessary browser extensions.

• Only use trusted browser plugins.

Keeping browsers updated helps protect against known vulnerabilities and improves compatibility with modern security technologies.

Public Wi-Fi and Remote Access

When working remotely, users should exercise additional caution.

Avoid accessing Assessment Manager over unsecured public Wi-Fi networks unless you are using a trusted Virtual Private Network (VPN) or another secure connection.

If public Wi-Fi must be used:

• Confirm the network is legitimate.

• Avoid accessing sensitive information where possible.

• Log out immediately after completing your work.

• Never allow browsers to save passwords on public devices.

Secure Document Management

Assessment Manager allows organisations to upload policies, procedures, evidence and supporting documentation.

Before uploading documents:

• Confirm they are relevant to the assessment.

• Remove unnecessary personal information where possible.

• Ensure documents are the approved organisational version.

• Avoid uploading confidential information that is not required.

• Check documents for sensitive information before sharing internally.

Good document management supports both privacy and information security.

User Awareness

Technology alone cannot prevent cyber incidents.

Organisations should encourage users to:

• Understand common cyber threats.

• Recognise phishing emails.

• Report suspicious activity promptly.

• Follow organisational information security policies.

• Complete cyber awareness training where available.

Building cyber awareness across the organisation is one of the most effective ways to reduce security risks.

Incident Reporting

Early reporting significantly improves an organisation's ability to respond to cyber security incidents.

Users should immediately report:

• Suspected unauthorised access.

• Lost or stolen devices.

• Suspicious emails.

• Unexpected password changes.

• Incorrect user permissions.

• Unusual account activity.

• Suspected data breaches.

Prompt reporting enables organisations to investigate issues quickly and minimise potential impacts.

Cyber Security Best Practice Checklist

Organisations using Assessment Manager should:

✔ Use strong, unique passwords.

✔ Provide every employee with an individual account.

✔ Keep browsers and operating systems updated.

✔ Remove former employees promptly.

✔ Review user permissions regularly.

✔ Avoid unsecured public Wi-Fi.

✔ Protect organisational devices.

✔ Upload only authorised information.

✔ Encourage cyber security awareness.

✔ Report suspicious activity immediately.

Frequently Asked Questions

Does Assessment Manager protect against cyber attacks?

Assessment Manager incorporates multiple enterprise-grade security controls including encrypted communications, role-based access control, Web Application Firewall (WAF) protection, DDoS mitigation, infrastructure monitoring and secure cloud hosting. Organisations also play an important role by following good cyber security practices.

Should employees share user accounts?

No. Every employee should have their own account. Individual accounts improve accountability, strengthen security and ensure platform activity can be attributed to the correct user.

Is it safe to use Assessment Manager on public Wi-Fi?

Where possible, use a trusted private network. If public Wi-Fi is unavoidable, use a secure connection such as a VPN, avoid leaving sessions unattended and always log out when finished.

What should I do if I think my password has been compromised?

Change your password immediately and notify your Organisation Administrator. If you suspect unauthorised access to your account, report the incident as soon as possible so appropriate action can be taken.

Why is cyber awareness important?

Most cyber incidents result from human error rather than technical failures. Educating users about phishing, password security and safe online practices is one of the most effective ways to protect organisational information.

Where can I learn more about cyber security?

The Australian Cyber Security Centre (ACSC) provides practical guidance for organisations and individuals on protecting information, responding to cyber threats and implementing good cyber security practices.