Cybersecurity Basics

Essential for All Staff

Cybersecurity Basics

You don’t need to be a technology expert to help keep ROP secure. A few simple habits can protect your account, your computer, and organizational information from many common security threats.

Remember: If something online seems unusual, unexpected, or suspicious, it is always better to stop and ask for help before clicking, approving, downloading, or providing information.

Five Security Habits to Remember

1

Think Before You Click

Phishing messages are designed to look legitimate and may appear to come from a coworker, manager, vendor, or familiar company.

  • Be cautious with unexpected links and attachments.
  • Look carefully at the sender’s email address.
  • Be suspicious of messages creating unusual urgency.
  • When in doubt, verify the request another way.
2

Protect Your Password

Your password helps protect access to ROP systems and information. Treat it like a key to the building.

  • Never share your password with another person.
  • Use a strong, unique password.
  • Do not reuse your ROP password on personal websites.
  • Never send passwords through email or text.
3

Approve MFA Only When It’s You

Multi-factor authentication (MFA) adds an important second layer of protection to your account.

  • Approve an MFA request only when you are actively signing in.
  • Never approve an unexpected authentication request.
  • Never provide an MFA verification code to another person.
4

Keep Your Device Secure

Protecting your computer is also part of protecting ROP information.

  • Lock your computer when you walk away.
  • Install approved updates when prompted.
  • Do not install unknown or unauthorized software.
  • Keep work devices physically secure.
5

Report Anything Suspicious

If you clicked a suspicious link, opened an unusual attachment, approved an unexpected MFA request, or simply think something may be wrong, contact IT as soon as possible.

You do not need to diagnose the problem yourself. Prompt reporting gives the IT team an opportunity to investigate and respond quickly.

⚠ A Common Warning Sign: Unexpected Urgency

Be especially cautious when a message unexpectedly asks you to immediately purchase something, transfer money, change payment information, provide credentials, open an attachment, or sign in through a link.

Before You Click, Ask Yourself…

✓ Was I expecting this message or attachment?
✓ Do I recognize the sender and the actual email address?
✓ Does this request make sense?
✓ Is someone pressuring me to act unusually quickly?
✓ Would I be comfortable verifying this request before proceeding?

Can You Spot the Phish?

Phishing messages often look convincing. Read each example below and decide whether you would trust it. Then select Reveal the Answer to see what you should notice.

Example 1
From: Microsoft Security <security-alert@micros0ft-login.com>
Subject: URGENT: Your account will be disabled today

We detected unusual activity on your Microsoft account. Your account will be disabled within 2 hours unless you verify your identity immediately.

Click below to prevent interruption to your email access.

Verify My Account
Reveal the Answer
⚠ Phishing Message

Several warning signs appear in this message:

  • The sender’s domain uses micros0ft with a zero instead of the letter “o.”
  • The message creates extreme urgency.
  • It threatens immediate account suspension.
  • It asks you to sign in through an unexpected link.

What to do: Do not click the link. Contact the IT Helpdesk if you are concerned about your account.

Example 2
From: Executive Office <director.rop@gmail.com>
Subject: Need a quick favor

I’m in a meeting and can’t talk right now. I need you to purchase four $200 gift cards for an employee recognition event.

Please send me the card numbers as soon as you purchase them. I need this completed within the next hour.

Reveal the Answer
⚠ Phishing Message

This is a common impersonation scam. Warning signs include:

  • The request comes from an unfamiliar personal email account.
  • The sender claims they cannot speak by phone.
  • The request involves gift cards.
  • The sender creates unusual urgency.
  • You are asked to send gift card numbers electronically.

What to do: Do not make the purchase. Verify unusual financial requests with the person through a known phone number or another trusted method.

Example 3
From: ROP IT Helpdesk <helpdesk@rop.com>
Subject: Support Ticket Update

Your IT support request has been updated.

An IT technician may contact you regarding the issue you reported. If remote assistance is needed, the technician will provide instructions during your support session.

If you did not submit a support request, please contact the Helpdesk at the published support number.

Reveal the Answer
✓ Likely Legitimate

This message has several positive signs:

  • It comes from the expected ROP domain.
  • It does not ask for a password or MFA code.
  • It does not pressure you to act immediately.
  • It tells you to use a known support channel if you are unsure.

Still remember: Even familiar-looking messages can be spoofed. If something feels unusual, contact IT independently rather than relying on links or phone numbers contained in the message.

The goal isn’t to become a phishing expert. If a message seems unusual, unexpected, urgent, or simply doesn’t feel right, stop and contact the IT Helpdesk before taking action.

Something Doesn’t Look Right?

Stop and contact the Rite of Passage IT Helpdesk. It is always better to ask before proceeding with something suspicious.

Email the Helpdesk Call (775) 392-2600
Want to learn more? Visit Microsoft Security Help & Learning