UK National Cyber Security Centre,Business communications – SMS and telephone best practice

Business Communications – SMS and Telephone Best Practice

Published by the UK National Cyber Security Centre on 2023-02-03

Introduction

SMS (text messages) and telephone calls remain essential communication channels for businesses. However, these channels can also be exploited by attackers to compromise systems and steal data. This article provides best practices for businesses to secure their SMS and telephone communications.

SMS Best Practices

• Use a reputable SMS provider: Choose a provider that has a strong security track record and follows industry best practices.
• Implement two-factor authentication (2FA) for SMS: Require users to provide a second factor, such as a one-time password (OTP), when receiving SMS messages from sensitive sources.
• Be cautious of unsolicited SMS messages: Never click on links or open attachments in SMS messages from unknown senders.
• Educate employees about SMS phishing: Train employees to recognize and avoid SMS phishing scams.
• Monitor SMS traffic for suspicious activity: Use a security tool to monitor SMS traffic for unusual patterns or messages from suspicious sources.

Telephone Best Practices

• Use a secure telephone system: Implement a telephone system that supports encryption and authentication mechanisms.
• Educate employees about phone scams: Train employees to recognize and avoid phone scams, such as vishing (voice phishing) and smishing (SMS phishing).
• Use caller ID verification: Implement caller ID verification measures to identify and block calls from known spammers or fraudsters.
• Monitor telephone traffic for suspicious activity: Use a security tool to monitor telephone traffic for unusual patterns or calls from suspicious sources.
• Limit access to sensitive information: Restrict access to sensitive information, such as account details or passwords, over the telephone.

Additional Recommendations

• Implement a layered security approach: Use a combination of security measures, such as encryption, authentication, and access controls, to protect your SMS and telephone communications.
• Stay up-to-date on security best practices: Regularly review and update your security measures to keep pace with evolving threats.
• Conduct regular security audits: Conduct periodic security audits to identify and address any vulnerabilities in your SMS and telephone systems.

Conclusion

By implementing these best practices, businesses can significantly reduce the risk of compromise through SMS and telephone communications. By following these guidelines, businesses can protect their sensitive information, maintain confidentiality, and ensure the integrity of their communications.

The AI has provided us with the news.

I’ve asked Google Gemini the following question, and here’s its response.

UK National Cyber Security Centre a new article on 2025-02-03 21:08 titled “Business communications – SMS and telephone best practice”. Please write a detailed article on this news item, including any relevant information. Answers should be in English.

66