Stay Secure: Guide to Security Awareness

At BHG, your security is our top priority. As cyber threats continue to evolve, your awareness should too. Below are a few simple steps you can take to ensure you are protecting yourself.

Please be aware that we will never ask you for your password, or personal identification numbers (PINs). Always ensure you are using our official website and report any suspicious activity to our support team immediately.

How we protect you

BHG Financial is dedicated to keeping the critical data of our customers and employees safe. Trust is integral value at BHG, which is why we have dedicated people, resources and financial investment towards ongoing independent third-party evaluations.

Here are a few ways we work to ensure you, and your data are safe:

• BHG has completed its SOC 2 Type 2 examination in accordance with American Institute of Certified Public Accountants (AICPA) standards: SOC for Service Organizations, which ensures that we are safeguarding customer data throughout our services and meeting standards for strong operational effectiveness. www.aicpa.org/soc4so
• BHG has won the Fortress Cybersecurity Award in 2022 and 2024. The award recognizes companies with best-in-class cybersecurity including advances in technology to tools that streamline the training process for employees aiding in data protection.

Social engineering tactics

Phishing

Phishing emails are one of the most common tactics used by cybercriminals to steal sensitive information such as login credentials or personal data. Before clicking on any links or responding, ask yourself the following:

• Do I know the sender?
  • Closely inspect the sender’s email address for any slight misspellings or oddities.
• Am I addressed by name in the greeting?
  • Look out for generic greetings. Legitimate entities will address you by your real name or username.
• Are there misspellings or grammatical errors?
  • Common warning signs of generic phishing attacks include grammatical errors and misspellings.
• Is there a sense of urgency in the message?
  • Phishing emails use a sense of urgency or use fear tactics to get you to respond immediately.
• Does the web address match the links in the email?
  • Hover over a link, you’ll see a pop-up of the actual website address.
  • If you want to check the site, type the URL you know is legitimate directly into the new browser window.
• Would I normally get this type of email from this individual or organization?
  • Not every phishing email will consist of the signs above. Be extra cautious.
  • Ask yourself the above question, would I normally get this email from this sender?

If possible, use an alternative method of communication that is legitimate to reach out to the sender to confirm their identity.

Vishing & smishing

Vishing also known as voice phishing, involves scammers making phone calls, pretending to be from a legitimate organization to manipulate you into sharing sensitive information. 

• Never provide personal or financial information over the phone unless you initiated the call to a trusted organization.

• Be cautious of unexpected messages that ask you to verify account details, download attachments, or click on links.
• Always verify with the organization directly if in doubt.Look out for generic greetings. Legitimate entities will address you by your real name or username.

Protect Yourself Online

Social media

Cyber threats are everywhere, and social media is no exception. From phishing scams to identity threats, protecting yourself online is more important than ever.

Here are a few best practices to protect yourself online:

• Review your privacy settings:
  • Limit who can see your posts and profile details. Make sure your profiles are set to private and only share information or accept requests from trusted contacts.
• Use strong, unique passwords for each account:
  • Avoid reusing passwords across multiple sites. Use a mix of uppercase and lowercase letters, numbers, and symbols for each platform. Or use a password manager to generate and store them securely.
• Enable two factor authentication:
  • Add an extra layer of security to all your online accounts. Enable two-factor authentication, where available. This will require you to confirm your identity with a second factor, like your phone or email when logging in.
• Think before you post:
  • Be mindful about the personal information you share such as your location tags, birth dates, or vacation details. Cybercriminals can monitor your account and use this data to target you.
• Monitor for fake profiles and scams
  • Be skeptical of friend requests from people you don’t know. Cybercriminals may attempt to create fake profiles in hopes of gathering personal information from you.
• Monitor your accounts for unusual activity:
  • Regularly check your account activity and look for signs of unauthorized access. If you notice anything suspicious: Report it, change your password, and temporarily revoke access to all applications on your phone.

Protect yourself against malware

Malware

Malware or malicious software is any software intentionally designed to cause damage to your computer, service or network. Malware can come in the form of viruses, worms, spyware, ransomware, and more. All tailored to steal sensitive data, hijack your system, or hold your files for ransom.

Common types of malwares include viruses, spyware and ransomware. A few ways to protect yourself:

• Use antivirus software
  • Install reputable antivirus software on all your devices. Antivirus programs can detect and remove malware as well as provide ongoing protection by scanning for threats.
• Enabled automatic software updates (patching)
  • Cybercriminals can exploit vulnerabilities in outdated software. Make sure your operating systems, applications, and antivirus programs are always up to date.
• Be cautious with downloads and links
  • Don’t download attachments from untrusted sources or click on unknown links in email or text messages.
• Use a firewall
  • Firewalls act as a barrier between your device and potential threats from the internet. Ensure that your firewall is enabled to block unauthorized access.

How to contact BHG Financial

https://bhgfinancial.com/contact-us