October is Cybersecurity Awareness Month, and it’s not just for large organizations and corporations. We all use the Internet daily: on our phones, on work computers, and even when we pay for coffee at a drive-through. Every time we use the Internet, there is an opportunity for cyber-criminals. Small businesses owe it to their company, which they worked hard to build, to their employees, and to their clients to keep information and systems safe.

In recent weeks, ALCC offices have witnessed several instances of green industry professionals dealing with a cybersecurity issue: receiving a spoofed email meant to look as if it came from an industry member; being notified that another industry professional suffered a security breach; and receiving an “invoice” from a scammer pretending to be ALCC. The last scam was easily recognized because of sloppy mistakes: the logo, lifted from Facebook, was an old version of the ALCC logo and the name Alcc was spelled with lowercase letters (“Alcc’). The big giveaway was that the email did not come from an alcc.com email address.

This issue of Colorado Green Now offers some helpful information about cybersecurity, especially as it applies to email. ALCC and Colorado Green Now encourage readers to take some time to review their own email and online security practices.

More information on cybersecurity:

ALCC Cybersecurity webinar (recording available)

Colorado Green Now articles

• Do you lock your digital doors at the office?
• Pay attention to passwords
• Have you assessed your company's cybersecurity risks?
• Scam alert: is a fraudster taking your company's payments?

Government resources

• Colorado House Bill 18-1128 Protections For Consumer Data Privacy (Concerning strengthening protections for consumer data privacy). Colorado businesses have a legal obligation to protect their clients’ data.
• Department of Homeland Security Cybersecurity Resources Road Map (for small and midsize businesses)
• Small business resources from the US Cybersecurity & Infrastructure Security Agency (CISA)
• Mobile security tip card. Smartphones are just tiny computers, and they need to be secured just as you would a laptop or desktop computer. 
• Industry employees tip card. Employees need to understand how to protect their workplace IT system and data. 
• Security Tip (ST15-002): Home Network Security. Employees who work remotely, whether it be for a few days a month or indefinitely, should secure their home network to protect themselves as well as their employer’s data.