Cybersecurity
The division of information security that pertains to the protection and availability of digital information.
Report it directly to Microsoft using the "Report" button in Outlook or Outlook on the web: choose "Report Phishing" for messages trying to steal credentials or trigger actions like bank transfers, and "Report Junk" for unwanted ads. Microsoft uses submissions to improve filtering. Blocking senders is ineffective. Tridium clients unsure about a message can submit it to Tridium support for review.
The most important information security best practices are using multi-factor authentication, practicing least privilege, and installing updates regularly. Others include long, unique passwords kept in a password manager, locking devices with a short auto-lock timer, encrypting data at rest and in transit, restricting admin access, monitoring third parties, regular audits, and security awareness training, applied consistently every day.
Device compliance is an automated, regular checkup confirming a device meets security baselines such as data encryption, an enabled firewall, up-to-date antivirus, a working Trusted Platform Module, and Secure Boot. Failed checks alert IT. With Microsoft 365 Conditional Access, non-compliant devices can automatically lose access to organizational data until fixed, reducing risk.
Device management lets an organization control its devices by applying policies users cannot circumvent, improving security, efficiency, and performance. Common policies enforce storage encryption, up-to-date antivirus, automatic screen locking, USB drive restrictions, required business and security software, Wi-Fi setup, and remote wipe. It works alongside device compliance, which passively checks that devices meet requirements.
Patch management is the process of making sure software patches, which correct bugs and security vulnerabilities in operating systems such as Windows, macOS, and iOS, are actually applied to devices rather than postponed. It is basic security hygiene: fewer unpatched holes means less chance a vulnerability becomes a security incident. Tridium includes patch management in all of its managed services packages.
Some applications need administrator approval because they install for all users, change system settings such as startup apps or the firewall, or install drivers, the same actions malware uses. Admin rights could also disable antivirus, EDR, or updates. Tridium limits administrative access by default; clients must specifically request it and sign a waiver acknowledging the added risk.