NJOHSP, NJCCIC Kick Off 2024 Cybersecurity Awareness Month

HAMILTON, NJ – Following Governor Phil Murphy’s proclamation recognizing October as Cybersecurity Awareness Month, the New Jersey Office of Homeland Security and Preparedness (NJOHSP) and the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC) are ramping up efforts to promote cyber safety across the Garden State this month and beyond.

New Jersey’s observance runs parallel to the national Cybersecurity Awareness Month campaign, an initiative that is marking its 21^st anniversary in 2024.

The federal Cybersecurity and Infrastructure Security Agency (CISA) leads this year’s “Secure Our World” campaign, which highlights the need for the public and private sectors to work together to raise awareness about the importance of cybersecurity. CISA encourages individuals and organizations to recognize the importance of taking daily action to reduce risks when online and connected to devices.

In lockstep with the national campaign’s objectives, the NJCCIC, a division of NJOHSP, urges the public to implement several resiliency-building cyber hygiene practices, including:

• Recognizing and reporting phishing incidents
• Using strong passwords
• Enabling multifactor authentication
• Updating software

“Cybersecurity is the shield that protects the digital fabric of our interconnected world; its importance in our state as well as the global stage cannot be overstated, as it safeguards not only individual privacy but the very integrity of nations and states,” said NJOHSP Director Laurie Doran. “Given that most cyber incidents are linked to human actions, we are committed to promoting these awareness campaigns to help prevent potential cyber threats. We strive to empower the public and private sectors with cutting-edge tools, knowledge, and resources to confidently and safely navigate the evolving digital landscape.”

According to the NJCCIC, the most common threats/scams targeting individuals and businesses are:

• Business Email Compromise: A targeted phishing scheme in which threat actors commonly spoof the source name or email address of a familiar vendor or third-party contact, use email domains that mimic a trusted source, or compromise a legitimate business account to convince users to transfer funds or divulge sensitive information.
• Credential Compromise: Credentials provide a way to authenticate users and control access to online accounts, email systems, network resources, and more. Threat actors attempt to harvest or steal these credentials through phishing and other methods to compromise accounts for subsequent cyber operations.
• Ransomware: A cyberattack in which threat actors obtain unauthorized access to a network and encrypt the victim organization’s data. The threat actors demand a ransom payment for the decryption key to regain access to their data.

“Cybersecurity stands as a critical pillar in the protection of our interconnected global infrastructure. In a world where digital threats know no borders, robust cybersecurity measures are essential to safeguard sensitive information and maintain national as well as states’ security,” said NJCCIC Director Michael Geraghty. “The NJCCIC emphasizes the significance of personal responsibility and proactive measures, advocating for good cyber hygiene by incorporating best practices into our daily routines. As we advance deeper into the digital age, our collaborative efforts to enhance cybersecurity will be pivotal in ensuring a safer and more resilient New Jersey.”

For further information on cyber best practices and incident reporting or to sign up for a free NJCCIC membership, which includes cyber-related updates, advisories, and newsletters, visit cyber.nj.gov.

###