Ensuring the Security and Protection of Institutional Information,
The National Library and Archives Highlights the
Importance of Email Security
The National Library and Archives organized a virtual lecture on “Email Security” as part of its commitment to information security in the face of technological advancements and the constantly evolving digital world. The National Library and Archives emphasizes the importance of email security as a fundamental component of institutional communication, used across various devices and environments, it is therefore essential to protect its accounts from loss or unauthorized access.
The lecture, presented by Mr. Abdalla Mohammed Abdul-Rahman Al Zarooni from the Telecommunications and Digital Government Regulatory Authority (TDRA), began by highlighting the importance of reporting any email phishing or hacking incidents to the organization’s IT department. He demonstrated by giving an example of one of the European economic cities that suffered from cyberattacks resulting in losses estimated at millions of dollars, all because a single employee clicked on a link. That simple action opened the door for viruses to infiltrate his computer and spread to the organization’s IT systems, leading to a major cybersecurity crisis – demonstrating how a major digital disaster can result from a very simple mistake. Therefore, even seemingly minor issues should not be underestimated.
The lecturer provided several examples of how hackers can access information to reach their victims. Hackers are persistent and may use phone calls or create fake websites; he noted that over one and a half million phishing sites are created every month. Therefore, it is essential to remain vigilant against email threats such as phishing, malicious attachments, spam, and others.
The lecture emphasized the importance of email security for the following reasons: maintaining the credibility of both sender and recipient, avoiding unwanted emails, and protecting the organization’s reputation..
Mr. Al Zarooni also emphasized the importance of not sharing the OTP (One-Time Password) codes with anyone. Short videos were shown demonstrating how some individuals fall victim to phishing, and various phishing techniques were explained. For example, an attacker may pose as a trusted person, exploiting trust to obtain sensitive information such as identity details or bank account information. Victims may also be targeted through websites resembling well-known sites or asked to provide personal or credit card information in exchange for enticing rewards.
The lecture also introduced safe email practices, including using encryption, complex passwords, not sharing passwords with anyone, and logging out properly.
The lecture received strong interest from participants, who enriched it through their engagement, ideas, and shared experiences.