Cyber Crime and Technological Advancements

The Fifth Dimension of Conflictuality: The Rise of Cyberspace and Its Effects on In- ternational Politics
Cyberspace has become a crucial element for political, social, financial and individual activities. The Information and Communication Technologies (ICT) have enhanced the human interactions and have contributed to “reinvent” classical concepts such as political participation, political debate, decision-making. However, their all-encom- passing, ubiquitous nature and their growing use for political and military purposes poses significant risks to international peace, stability and security. The low barrier of access to ICT capabilities, the speed of technological advances and the complexity of the cyberspace environment with regard to traditional legal definitions of borders have presented new challenges to States (the main actors of international relations) such as the inherent complexity of accurately attributing cyber-attacks. It is both this complexity and the frequent insistence of parties to attribute cyber-attacks and incidents “beyond a reasonable doubt” that gives one the ability to deny responsibility and frustrate attempts to build trust and political rapport in cyberspace. The purpose of this research is to analyze how cyberspace affects the international politics. The nature of the topic dictates the use of qualitative analysis of primary and secondary sources such as official reports, declarations and policy documents, and academic analysis, in order to understand effects and dynamics carried out by the cyber domain on classical concepts such as war, peace and international relations. The main idea of this research is that the development of Information and Communication Technolo- gies (ICTs) and the related (r)evolution of warfare have produced relevant effects on the dynamics of the contemporary international system highlighting, at the same time, how the militarization of the cyber domain has posed consequences on interna- tional security, peace and stability. However, the lack of specific research related to “cyberspace’s effects on international politics” highlights the need to devote more attention on this topic bearing in mind that, more extensive and enduring analysis on cyberspace’s dynamics might allowed policy makers the opportunity to improve
awareness related to cyber threats in order to governing challenges emerging from the digital sphere.

Il ´Cyber Strategy & Policy Brief´ si pone come scopo quello di sensibilizzare ogni mese il vertice politico e i lettori sui temi legati alla cyber-security, analizzando i principali avvenimenti a livello internazionale, al fine di desumere i trend della ‘minaccia cibernetica’ e le lezioni apprese utili alla salvaguardia della nostra sicurezza nazionale.

Le parole chiave di questo numero sono: Active Cyber-Defence, Cina, Cyber Warfare, Deterrenza, GCHQ, Israele, NSA, People’s Liberation Army, Regno Unito, Russia, Stati Uniti, Strategia, U.S. Cyber Command, Ucraina.

Today it is globally known that it is a modern era of Artificial Intelligence. There is a great impact of Artificial Intelligence on the society as we are surrounded by technology. It is being observed that in Today's time, Artificial Intelligence has turned out to be technically friendly due to increasing demand in the Tech Industry. Artificial intelligence may greatly increase the efficiency of the existing economy. But it may have an even larger impact by serving as a new general-purpose "method of invention" that can reshape the nature of the innovation process and the organization of R&D. Artificial Intelligence holds the ability to search, accumulate, analyse, manipulate and make decisions based on interpretations done. Digital Forensics is now adopting this technology to spot the patterns of online security attacks and threats that can be caused to the user browsing online on servers. These patterns may include Browsing History of servers, Credit Checks, Purchasing Histories, Online Payments and Transactions made by the user etc. To secure the users from various cyber threats and attacks we need to move to a new Tech Gateway for Cyber Forensics-"Artificial Intelligence". Today various Government Organizations like Police Cyber Cell, Joint Cipher Bureau, CBI Cyber Cell etc. are standing on the bleeding fringe of AI. The current globalization and technological advancements have meant that individual users, companies and organizations frequently need to adapt their internal cyber structure and operating cyber processes, to demonstrate efficiency and effectiveness of AI, especially when considering aspects that are beyond Tech Crimes, such as Cyber Hacking, User Account Penetration etc. To cope with that, this work proposes an alternative to model the evolution of AI in the field of Cyber Forensics. This paper highlights the role of Artificial Intelligence particularly in field of Digital Forensics, its application in different areas of Digital Forensic Processes and statistical facts relevant to this domain.

With the increase in the number of internet users in the country (India), led to a new form of crimes known as Cyber Crime. No doubt, the internet revolution has been a boon to mankind in many fields. However, the dark side of it also gaining ground which can be seen with an increase in the cyber crime cases in the last few years, especially in metropolitan cities. So, this paper tries to analyse the secondary data related to cyber crimes in metropolitan cities in India.
Key Words: Cyber Crime; Metropolitan Cities; Persons Arrested; Conviction; Police Pendency; Court Pendency, etc.

Data Leakage or Loss Prevention (DLP) or information leak prevention (ILP) or information protection and control (IPC) technology has been developed to prevent data from intentionally or accidentally leaking out. Data loss prevention systems differ from conventional security controls such as firewalls or intrusion detection systems (IDS) in terms of dedication and proactivity. Conventional security controls have less dedication to the actual content of the data. Although there are some academic DLP studies in the literature, very few studies on industrial solutions. This study established a DLP system for the Social Security Institution (Sosyal Güvenlik Kurumu, SGK) of Turkey. SGK is Turkey's one of the biggest institutions with 28,000 employees. Installation methods and experienced problems were noted objectively. And important things about the implementation of industrial DLP systems in large institutions have been marked.

Говорить об ошибке в когнитивной эволюции Homo позволяет наблюдаемая в прогнозе реальность и многовековой опыт жизнедеятельности человечества: ни обширное научное знание, ни фундаментальные духовные учения, ни гуманистическая технологизация не изменили взаимоотношений человека с окружающей реальностью и метавоздействия на действительность.  Пока что наша когнитивная эволюция носит характер стихийного бедствия, которое терпит человечество и среда его обитания, как результат прямого воздействия человека, уже более 5 столетий к ряду (становление классической науки).

Biometrics is a statistical analysis of people's unique behavioral characteristics. The technology is used for CYBERSECURITY. The basics of biometric authentication is that to stop security breaches by analyzing a person's unique behavioral characteristics. The term biometrics is derived from the Greek word's "bios" meaning life and "metricos" meaning to measure. It refers to measurements of physical and biological characteristics of the human body. In this paper, we have studied some biometric methods such as facial recognition, iris recognition, Retinal Recognition, voice recognition.

The present study has shed light upon the cyber risks associated with business management. The study has analyzed that with increasing digitalization and advancements in technology, the risks of cybersecurity are increasing as well. The study with a positivism philosophy, descriptive design has catered for providing recommendations by analyzing the situation with a questionnaire as a method of the study. Recent cyberattacks on critical infrastructure systems coupled with the technology-induced complexity of the system of systems have necessitated a review of existing methods of assessing critical systems security risk exposure. The question is: Do existing security risk assessment methods adequately address the threats of modern critical infrastructure systems? Having examined six existing assessment frameworks, we argue, the complexities associated with modern critical infrastructure systems make existing methods insufficient to assess systems security risks exposure. From the systems dynamics perspective, this project proposes a dynamic modeling approach as an alternative.

This paper includes the gender-neutral approach
of Section 66E, the application of this section, the
explanations, and the kind of situations this section
would be applicable in, a similar provision in the
Protection of Children from Sexual Offences (herein
after referred to as POCSO) Act, 2012 and the
shortcomings of this section.

Information security breaches pose a growing threat to organizations and individuals, particularly those that are mainly associated with the e-commerce industry. Data security within an organization is important as Information systems are susceptible to cyber-attacks and usage of Information systems is increasing dramatically in every sector whether it is the FMCG sector or education sector. An information security breach can have a major impact on the financial standing of the breached company and its competitors.

Social media may be seen as the new oil that makes the world go round providing access to all manner of information about the users. With the challenges to cyber security, social media users now require a level of awareness of the impact of their actions. This study focuses on the awareness level of social media users to the threats and risks of using the platforms and the extent to which the users are prepared to take responsibility. The study adopted a quantitative descriptive cross-sectional survey research over WhatsApp with 95 respondents selected from two institutions using random selection. Data collected were analyzed using IBM SPSS version 23 to generate summaries of descriptive statistics. All (100%) the respondents are within working class ages although most were aged 31-40 years (45.3%). All users were always on social media (SM) (100%), post daily on social media even though not all (21%) of them read terms and conditions associated with the different social media platf...

Note : √√ indicates aprincipal resposibility; √ indicates a secondary responsibility. Functional-level decisions implement the overall strategy formulated at the corporate and business levels. They involveaction-orientied operational issues and are relatively short range and low risk. Functional-level decisions incur onlymodest costs, because they are dependent on available resources. They usually are adaptable to ongoing activities and therefore, can be implemented with minimal coorporation. For example, in 1991, Nordstrom and Dilard Department Stores reported first-quarter profits of $ 26 million, a 95 % increase over the previous year. They attributed the increased earning to tighter inventory and operating controls in the parent company. In a second example, the corporate headquarter of Sears, Roebuck & Company spent $ 60 million in 1992 to automate 6,900 clerical jobs by installing 28.000 computerized cash registers at its 868 stores in the United States. Though this move eliminated many functional level jobs, topmanagement believed that reducing annual operating expenses by at least $ 50 million was crucial to competitive survival. Because functional-level decisions are relatively concrete and quantifiable, they receive critical attention and analysis even though their comparative profit potenstial is low. Common functional-level decisions include decisions on generic versus brand-name labeling, basic versus applied research and development (R&D), high versus low inventory levels, general-purpose versus specific-purpose production equipment, and close versus loose supervision. Business-level decisions help bridge decisions at the corporate and functional levels. Such decisions. Decisions are less costly, risky, and potentially profitable than functional-level decisions. Common business-level decisions include decisions on plan location, marketing segmentation and geographic coverage, and distribution channels.

Today cyber space is easily accessible and has presence beyond geo-political boundaries; also rapidly becoming a global battlefield for various states and non-states entities. With the advent of the Internet of Things (IoT), every compromised device has potential to become soldier or adversary.  It has become a necessity for each state to have its own separate individual cyber security policy. In 2003 the United States of America (USA) was first to understand the significance of cyber security policy and was the first country in the world to have a cyber-security policy. Cyberspace communication exposes countries to various challenges. This can be tackled by states by drafting and implementing effective cyber security policies. This project critically analysis the recent National Cyber Security Policies (NCSP’s) of UK, India, USA and Germany. The documents will be analysed in the light of derived framework. This project intends to do the comparative analysis for academic purposes only and can act as a stepping stone for bridging gaps in cyber security policies.

This thesis discusses the analysis and implementation of an information system for improving the management of internship program in higher institutions of learning a case study of the University of Kisubi. The system is meant to aid in supervisor allocation of interns, track the student’s internship activities and help in students’ internship evaluation.  The study was done at the University of Kisubi (UniK), located 24 Kilometers from Kampala, The Capital City of Uganda, along Kampala-Entebbe Highway Wakiso District.  To develop a system that will improve the management of internship program at the University of Kisubi that can help to establish a linkage between students and business organizations for career development opportunities.
The Study of current practices of how internship is done at the University of Kisubi (UniK) established that the old internship system was handling each aspect of the internship independent of the other. By providing a common platform for integration of all the internship management aspects within the new system, the University can now utilize the system to access all information on the students’ internship at a central point.
The study reviewed copious sources of literature related which resulted in a list of references for the recognition of the different scholars for their tremendous contribution to the overall body of knowledge.
Design science paradigm was used together with qualitative research strategy and case study method to conduct the study. The data needed for the research was collected using self-administered interviews, observation and document review methods and questionnaires.
An information system was analyzed and designed using HTML5, CSS, JavaScript and PHP and its prototype implemented to address the limitations of the current internship system used at UniK. The system provides different forms for data collection, a central database for storage of data and inbuilt scripts to aid report generation. 
The study was concluded by pointing out numerous recommendations for a better system.

= A NEW DIGITAL VERSION [E-BOOK] OF THIS WORK IS AVAILABLE IN KINDLE STORE | WWW.AMAZON.COM  THIS CONTENT IS SUPLYIED AS A COURTESY TO STUDENTS AND RESERCHERS. IF ADDITIONAL MATERIAL IS NEEDED, PLEASE CONTACT THE AUTHOR AT HEDI@ENGHELBERG.COM =



"LETTER TO READERS

“WE HAVE TO CONSIDER TERRORISM AS THE USE OF DEATH AS A POLITICAL WEAPON”  [HEDI ENGHELBERG]

Dear Reader,
My name is Hedi Enghelberg.  Since 1999 I have been working to promote public and government agencies awareness to a new threat of these times: The Cyber Terrorism and all its flavors manifested today in our cybernetic-machine-dominated economical, political, social and private life.
I have lectured in many occasions about this subject in important organizations, and in 2003 I wrote one of the first books written in this subject called Cyberterrorism, ISBN 980-07-8518-3.

Most important for these pages is to get the message across and make the public conscious about this danger (CYBER TERRORISM) that will affect us all. This danger will not be eliminated until strong legislation is put in place, respected and enforced. Some 80% of the computing systems we use dally, especially based on early version of the Windows programs*, and other very vulnerable software will have to be reformed and security systems reinforced. Many users have already ditched Windows in favor of Mac, Google OS/Chrome, or Linux as they want to remain productive for longer period of time, virus and Cyber Fraud free. BUT THEY ALL (OPERATIONAL SYSTEMS & SMART PHONES) HAVE UNPATCHED VULNERABILITIES. THEY ALL HAVE! The Cloud Computing will not solve all our problems, as many of the MS systems and early code scripts have been inherited into the cloud.

Terrorism is a tactic, at many levels and in many forms. Every day we register new attacks, by the thousand and the tens of thousands, under different forms of cyber terrorism, cyber crime, cyber fraud, cyber sabotage and economical espionage. The list of targets and points of origin is too long to be listed.
Under the veneer of the good things that internet brings to us all, there are negative and evil forces at work, all the time.
Without any doubt, we have to be conscious that an electromagnetic pulse attack will put all the IT systems on an industrial country out of work for some time, and can be used as a pre-emtive attack.

We are a decade after 9/11 and the main discussion is still centered on individual liberties, the Bill of Rights and the need for more security and how both will work together and influence each other. We don’t have to sacrifice liberty for security but counter-terrorism activities are here to stay!

THIS IS A WORK IN PROGRESS. We are currently revising and updating the English version of this book with Gail Tenzer as the translator of the original 2003 published Spanish book.
We would like to present you the book, and have your brief opinion about this very important, clear and present danger asymmetric war, represented by cyber terrorism.
"

Serious weaknesses were discovered in WPA2, a protocol that secures all modern protected Wi-Fi networks. An attacker within range of a victim can exploit these weaknesses using key reinstallation attacks (KRACKs). Concretely, attackers can use this novel attack technique to read information that was previously assumed to be safely encrypted. This can be abused to steal sensitive information such as credit card numbers, passwords, chat messages, emails, photos, and so on. The attack works against all modern protected WPA2-Wi-Fi networks. Depending on the handshake mechanism, it is also possible to inject and manipulate data. A solution is proposed to provide the secure handshake by capturing and analyzing the EAPOL packets to prevent nonce reuse which happens while reinstallation of Pairwise Trasient Key(PTK) which happens in case if there is an attack. Our patches blocks access to the victim system via rogue AP created by the KRACK and alerts the client about the suspicious activity and blocks the attacker from further attacking.

ABSTRACT
Cybercrime is a kind of crime that happens in cyberspace world, it happens in the world of computer (network or system) and the Internet. It is obvious that, many people have a limited knowledge of cybercrime, and this kind of crime has the serious potential for severe impact on people’s lives and society, because our society is becoming an information society in everyday life, full of information exchange happening in cyberspace world. People are committing cybercrime because of the cheapness of technology today by storing data in small space, millions of people operating system in the same time through internet, very easy to destroy evidence with no time, and slightest negligence of the user creating chaortic conditions.
Cooperate officers of the company, government, people and business people needs cyber legislation to curb the problem of cybercrime. It is difficulty to implement cybercrime laws, due to the jurisdiction maintainability, investigation outside the limits, loss of evidence of the computer data, and cyber army will need high technical persons. Damages of computer data causes computer and computer program not to function or working properly, and destroys data itself. Data used in cyberspace is like property when it is used in traditional way. This study paper will talk more about " Damage to data."

Despite the fact that the online criminal activities of Nigerian cyberfraudsters popularly known as the Yahoo-boys has attracted tremendous scholarly attention, little empirical information exists on their operational tools, techniques and underground networks. Hence, this study was motivated by the need to fill this observed gap. Social learning theory was adopted as theoretical guide while in-depth interview was principally deployed for data collection. Snowball sampling technique was utilized for the selection of 11 Yahoo-boys operating in Ibadan city. The results showed that Yahoo-boys who became wealthy through cyber fraud perpetration were being imitated by their peers who saw them as role models. Two major categories of operational tools were generally deployed by the Yahoo-boys for crime commission and illicit cash flows. Underground online forums, foreign criminal contacts and abroad-based criminal associates constituted the major sources of their operational tools and positively reinforced them towards cyber fraud. Yahoo-boys invested huge capital in the procurement of operational tools because they positively defined cyber fraud as a profitable business. There is the need for global law enforcement agencies and relevant international cybercrime-fighting institutions to constantly review and analyze the latest tools and techniques being employed by cyberfraudsters to effectively curtail their illegal activities.

Employees today are different. They are not the ones who do not have go
experienced and talented ones. As soon as they feel dissatisfied with the current employer or the job due to lack of advancement opportunities, salary and remuneration and others, they switch over to the next. The result is the employers lose their invested resources to their competitors, corporate memory is lost, employee relationships are strained and more over the moral of existing staff goes down. It is therefore very important that employers retain their employee which employees are encouraged to remain with the organization for the maximum period of time or until the completion of a particular project. view of its employees and what role retention plays in their job performance. The study confirms that lack of advancement opportunities, work more common reasons for departure organizations today and this study recommends that retention strategies should be aimed at retaining highly skilled personnel and at the same time building up under building confidence in the retention practices of the enshrined in the vision statement of the terms of work-life balance. This motivation of employees produces a culture of  commitment to the objectives of the organization.

Con il patrocinio di Agenzia per l'Italia Digitale (AgID), nel 2016 la LUISS School of Government ha organizzato il corso executive Rivoluzione Digitale e Cybersecurity rivolto a un gruppo di alti dirigenti pubblici con responsabilità di sicurezza informatica nelle amministrazioni centrali dello Stato.

Dallo scambio di prospettive tra i partecipanti al corso è emersa una serie di problematiche comuni e buone pratiche. Queste sono ora raccolte nel policy brief Cybersecurity nella Pubblica Amministrazione che intende contribuire alla discussione sulle soluzioni per affrontare i rischi cibernetici.

Il documento rappresenta un tentativo ragionato di contribuire al dialogo fra settore pubblico e privato in Italia e in Europa, sia aumentando la resilienza delle istituzioni pubbliche, sia rafforzando la competitività del settore privato nel partenariato con il pubblico per preparare gli Stati a fronteggiare nuovi attacchi cibernetici.

Il policy paper si articola in due sezioni. La prima parte raccoglie le raccomandazioni provenienti dai dirigenti della Pubblica Amministrazione che hanno partecipato al corso e si concentra su quattro temi: i servizi digitali della Pubblica Amministrazione sia interni sia esterni, il procurement di beni e servizi digitali, e le infrastrutture. Nella seconda parte si presentano, invece, le considerazioni elaborate dalle aziende leader del settore che hanno sponsorizzato il corso: BV Tech, IDS, Leonardo (ex Finmeccanica), Microsoft e Unipol.

Upskirting – covertly photographing a person's genital or anal region, often to distribute the footage online – is frequently neglected as a form of serious online sexual predation against women. This behaviour has occurred for centuries, and while its form has changed with the advent of smart phones and the internet, it has remained a pervasive and insidious harm against women. Drawing on my doctoral research this paper presents findings from a discourse analysis of the Victorian parliamentary debates relating to the Summary Offences Amendment (Upskirting) Bill 2007, and a sample of Australian media reports on upskirting over a 10-year period between 2005-2015. In this paper, I analyse the discursive construction of upskirting and identify three recurring themes that a) represent this behaviour as a harmless or victimless crime; b) only portray the behaviour as an invasion of privacy, and c) normalise harmful sexist ideology relating to gendered violence. I contend that upskirting is another example of how online spaces can facilitate violence against women, and that the ways in which it has been represented has simultaneously obscured, denied and contributed to the harm this behaviour can engender. It is imperative that in addition to understanding the nature of new technologically facilitated harms such as upskirting, scholars should also examine and challenge problematic popular representations of these new harms, so that a broader audience might also 'rethink' cybercrime.

The advancement in technology has gained universal acceptance which has made the use of computer system almost unavoidable in today's world. Most of the facets of all sectors which includes but not limited to commercial, media, education and entertainment etc. are now internet based. However, this progressive and welcoming advantage of the internet has also come with its disadvantages caused by the growing rate of internet-related crimes called "Cybercrimes." The increasing rate of cybercrimes in Nigeria has been linked with lack of sufficient laws and failure of the relevant law enforcement agencies to implement the existing laws which is aimed at preventing and punishing these crimes in Nigeria. This paper will examine the impact and causes of Cybercrime in Nigeria. The paper will also appraise the legal framework vis-à-vis the various challenges that inhibit the successful prosecution of cybercrime in Nigeria.

With the increase use of Information and Communication Technology (ICT) in society, there emerge a new form of crime in cyber space which is called Cyber Crime. The cyber crime is different from any other crime happening in the society. The reason being, it has no geographical boundaries and the cyber criminals are unknown. So, in the present time, cyber crime emerges as an important challenge for all countries including India. It is affecting all the stakeholders from government, business to citizens alike. In India, in the last few years, cyber crime is increasing with increase usage of ICT. Therefore, this article tries to study and analyse the cyber crime happening in India (States/UTs-wise) in the last five years. Further, it discusses some important initiatives of Government of India, to overcome cyber crime in the country.

The intent of this chapter is to re-imagine and apply the term " civil disobedience " to the cyber domain. The full extent of how it can apply will be analyzed in a framework of the evolutionary rights of protest. Traditional civil disobedience is a " performance " via visual and physical mediums, while cyber disobedience is essentially a digital performance with difficulty in attributing true ownership of the act. This is an interesting antithesis to the physical protestor, who uses strategic visibility, threat of arrest, and popular backlash against state behavior as vital aspects of the disobedience. These variables are noticeably absent in cyber disobedience.

In the past, we all witnessed that the production facilities were shifted to the countries with low employment costs due to the increasing labour costs around the world. Today, especially with the revolution of industry 4.0 initiated under the leadership of the developed countries on the basis of technology, industrial competition is tried to be provided within the framework of productivity and quality by reducing the cost of workmanship. The Industry 4.0 revolution is also defined as intelligent self-coordinating factories almost independently of people. The entry of Industry 4.0 into our lives is expected to revolutionize many sectors especially information technologies, communication and education. In this context, the subject of crime is also a candidate to be one of the areas of change because the profitable gain structure of the Industry 4.0 environment is expected to be one of the factors that motivate criminals to take action in this field. Therefore, the industrial revolutions were aimed to be examined in terms of security, internet of things and big data with this study conducted. In the analysis performed, it is clear that Industry 4.0, which aims at production maximization, will cause security problems with its current situation. With Industry 4.0, these security issues have become more specific problems and the concept of automation has added new paradigms to security issues and increased the possibility of being a victim of cyber threats. Currently, our industry is between Industry 2.0 and Industry 3.0. Within this scope, it is essential to enhance the technical background of the security teams in order to prevent the crimes that may occur in the future. It is expected that the most appropriate action type of security teams is the security-focused defence understanding. Regarding this understanding, a proactive attitude should be exhibited and it is necessary to use effective methods against cybercriminals. In today's world where the technology changes rapidly, it should be considered that a statical defence understanding cannot be accepted but security teams should adopt a dynamic cybercrime intervention policy in order to fight against new threats.

Purpose-The emergence of the novel coronavirus (COVID-19) has threatened physical and mental health, and changed the behaviour and decision-making processes of individuals, organisations, and institutions worldwide. As many services move online due to the pandemic, COVID-19-themed cyber fraud is also growing. This article explores cyber fraud victimization and cyber security threats during COVID-19 using psychological and traditional criminological theories. It also provides a COVID-19-themed cyber fraud typology using empirical evidence from institutional and agency reports. Through organizing COVID-19themed cyber fraud into four different categorizations, we aim to offer classification insights to researchers and industry professionals so that stakeholders can effectively manage emerging cyber fraud risks in our current pandemic. Design/methodology/approach-The approach the study take for this conceptual paper is typology.

Businesses using cyberspace are expanding every day, with Internet users performing different activities affecting cyber hygiene. The user's actions may be good or badultimately determining the state of cyber hygiene. Good cybersecurity hygiene requires a thorough implementation of the best practices to improve safety and protect information or resources, while bad practices lead to data corruption, loss and breaches. Compromised cyber hygiene is the result of exposure to various cyberattacks. Our paper reports the best practices used by different business sectors to maintain cyber hygiene. The study used a qualitative survey mounted on google with 20 business owners and Information Technology managers. We explored the use of best practices to understand business experiences in reducing and avoiding cyber-attacks and improve cyber health. We analyzed the collected data and presented the findings. Cyber essentials have been recommended as the guideline to mitigate cyber risks.