Cybersecurity Tips for Grant Recipients

Never Share Sensitive Information

Creative Saskatchewan will never ask for your credit card information, passwords, or other sensitive data via email or phone. We ask that you make any information changes via our online grant management system (GMS).

Verify Information Changes

If Creative Saskatchewan receives a request to change account information for you, we will verify it by calling you directly using a known phone number. Do not use contact details provided in any suspicious message. Always feel free to check our Staff Directory and confirm if you are not sure.

Recognize Phishing Attempts

Phishing is a common scam where attackers impersonate legitimate organizations to steal personal information. Look out for suspicious emails or messages that ask for sensitive information or prompt you to click on unfamiliar links. Examples of phishing attempts include:

Emails claiming to be from your bank asking you to verify your account details by clicking on a link.
Messages from “tech support” stating that your computer has a virus and asking you to download a file or provide remote access.
Fake shipping notifications from companies like FedEx or UPS, asking you to click on a link to track a package.
Social media messages from friends or contacts asking for urgent financial help or personal information.

Use the SLAM Method

When you receive an email, use the SLAM method to identify potential phishing attempts:

Sender: Check the sender’s email address for any irregularities or unfamiliar domains. Sometimes an “i” can be changed to an “l” and go unnoticed!
Links: Hover over links to see where they lead before clicking. Ensure they match the legitimate website.
Attachments: Be cautious with attachments, especially if you weren’t expecting them. They could contain malware.
Message: Analyze the content for signs of phishing, such as urgent language, requests for personal information, or poor grammar.

Use Strong, Unique Passwords

Create strong passwords that are unique for each of your accounts. Avoid using easily guessable information like birthdays or common words. Consider using a password manager to keep track of your passwords. A password manager securely stores and organizes your passwords, allowing you to use complex and unique passwords for each account without having to remember them all. Reputable password managers include:

Enable Multi-Factor Authentication (MFA)

Whenever possible, enable MFA on your accounts. This adds an extra layer of security by requiring a second form of verification in addition to your password.

Keep Software Updated

Regularly update your software, including operating systems, browsers, and applications. Updates often include security patches that protect against known vulnerabilities.

Be Cautious with Links and Attachments

Avoid clicking on links or downloading attachments from unknown or unsolicited emails. These could contain malware or lead to phishing sites.

Secure Your Devices

Use antivirus software and keep it updated. Ensure your devices are protected with strong passwords or biometric authentication.

Back Up Your Data

Regularly back up important data to an external hard drive or a secure cloud service. This ensures you can recover your information in case of a cyber-attack or hardware failure.

Educate Yourself and Stay Informed

Stay informed about the latest cybersecurity threats and best practices. Regularly review security tips and updates from trusted sources. Trusted sources include: