Highlighted wordsare glossary terms — tap one for a plain-language definition.
The last step in CISA's curriculum is planning your response. A written half-page plan turns a panicked night into a checklist — and then you extend the habit to colleagues and family.
Write the plan
Cover the first hour: what you check, what you lock, and who you tell.
- List steps: change passwords from a clean device, revoke sessions, rotate Multifactor authenticationWhat it means: Using more than one type of authentication evidence before an account grants access.Example: Entering your password and then approving the login through an authenticator app.What to do: Turn it on first for your email, financial, social-media, and cloud accounts.Important: Never give an unexpected login code to someone who contacts you.What does this mean?, check recovery settings.
- Keep offline copies of key contacts and BackupWhat it means: An additional copy of information that can be restored if the original is lost, damaged, or encrypted.Example: An external drive copy plus a cloud copy of your photos.What to do: Keep one copy disconnected, and test restoring a single file so you know it works.Important: Ransomware encrypts backups that stay permanently connected.What does this mean? codes.
- Note where your backups are and how to restore them.
- Save a digital-security helpline and your organization's reporting contact.
Extend it outward
Attackers move through the people around you. Sharing what you've learned is a security control, not just a courtesy.
- Walk family and colleagues through PhishingWhat it means: A deceptive email or message designed to make you click, share information, send money, or give account access.Example: An “unpaid delivery fee” text with a link to a page that looks like the post office.What to do: Don't tap links in unexpected messages — open the company's app or type its address yourself.Important: Real companies never ask for your password or a login code by message.What does this mean?, passwords, MFA, and updates.
- Share CISA's free Secure Our World materials.
- Agree on a code phrase to verify urgent requests within your team or family.
- Practise the plan once — a five-minute dry run finds the gaps.
Brought to you by NorthBridge
Unfamiliar term? Open the Digital Safety Glossary