AAT Systems Ltd AAT Systems Ltd IT Infrastructure · Managed Services · Consultancy

Staying safe in the digital world.

Practical, plain-English guidance for individuals, families and businesses — from recognising phishing emails to keeping children safe online. Provided as a free resource by AAT Computer Solutions.

Common Online Threats

Understanding what you're up against is the first step to protecting yourself and your family online.

Phishing & Email Scams

Fraudulent emails designed to trick you into revealing passwords, bank details or personal information. They often impersonate trusted organisations like banks, HMRC or delivery companies.

Ransomware & Malware

Malicious software that can lock your files and demand payment, steal your data silently, or give criminals remote access to your computer. Often delivered via email attachments or dodgy downloads.

Identity Theft & Fraud

Criminals stealing enough personal information to impersonate you — opening bank accounts, taking out credit or making purchases in your name. Often starts with a data breach or social engineering.

Social Engineering

Manipulative phone calls, texts or messages from people pretending to be your bank, Microsoft, broadband provider or even the police — pressuring you into giving access or making payments.

Unsafe Websites & Downloads

Fake or compromised websites that install malware, harvest login credentials, or trick you into entering payment details. Look for HTTPS, check URLs carefully and avoid clicking links in unsolicited messages.

SMiShing & Vishing

Phishing via SMS text messages (SMiShing) or voice calls (Vishing). Fake delivery notifications, bank alerts or tax refund texts are common — never click links in unexpected texts or give details over the phone.

Practical Safety Tips

Simple steps that make a real difference to your security online.

1 Passwords & Authentication

  • Use a unique, strong password for every account — at least 12 characters mixing letters, numbers and symbols. A passphrase like "PurpleTiger$Runs4Miles!" is strong and memorable.
  • Never reuse passwords. If one service is breached, criminals will try those same credentials everywhere else.
  • Turn on multi-factor authentication (MFA/2FA) wherever it's available — especially email, banking, and cloud services like Microsoft 365.
  • Consider a reputable password manager (such as Bitwarden or 1Password) to generate and store strong passwords securely.

2 Email & Messaging

  • Be suspicious of any unexpected email asking you to click a link, open an attachment or provide personal information — even if it appears to come from someone you know.
  • Hover over links before clicking to check the real destination. Look for misspellings in domain names (e.g. "amaz0n.co.uk" or "roya1mai1.com").
  • Never open attachments you weren't expecting, particularly .exe, .zip, .js or macro-enabled Office files (.docm, .xlsm).
  • If in doubt, contact the supposed sender through a different channel to verify the message is genuine.

3 Devices & Software

  • Keep your operating system, browser and applications up to date — security patches fix known vulnerabilities that criminals actively exploit.
  • Use reputable antivirus/anti-malware software and ensure it updates automatically.
  • Lock your devices with a PIN, password or biometric when not in use. Set a short auto-lock timeout.
  • Back up important files regularly — ideally using the 3-2-1 rule: 3 copies, on 2 different types of media, with 1 stored off-site or in the cloud.
  • Encrypt sensitive data on laptops and USB drives. Windows Pro editions include BitLocker; macOS includes FileVault.

4 Browsing & Social Media

  • Check that websites use HTTPS (padlock icon) before entering any personal or payment information.
  • Be cautious about what you share on social media — details like your birthday, pet's name, school or mother's maiden name are commonly used in security questions.
  • Review your privacy settings on social media platforms regularly. Limit who can see your posts, friends list and personal details.
  • Be wary of quizzes and personality tests on social media — they often harvest personal data or security answer clues.

5 Wi-Fi & Public Networks

  • Avoid accessing banking, email or sensitive accounts on public Wi-Fi. If you must, use a reputable VPN service.
  • Change the default password on your home router. Use WPA3 or WPA2 encryption — never leave it open or on the older WEP standard.
  • Disable auto-connect to open Wi-Fi networks on your phone and laptop.

Keeping Children Safe Online

The internet is a brilliant resource for learning and socialising, but children face risks that require active parental involvement.

Key Risks for Children & Young People

Cyberbullying, inappropriate content, online grooming, excessive screen time, sharing personal information, in-app purchases, and exposure to misinformation. Children may also encounter pressure to share images or engage in risky online challenges.

1 Talk Openly

  • Have regular, non-judgemental conversations about what your children do online. Make it clear they can come to you if something upsets or worries them.
  • Take an interest in the apps, games and platforms they use. Ask them to show you — children often enjoy teaching adults.
  • Explain that people online may not be who they claim to be, and that it's never their fault if someone behaves inappropriately towards them.

2 Use Parental Controls

  • Set up parental controls on devices, browsers and your home broadband router. Most broadband providers offer free family-safe filtering.
  • Use the built-in parental controls on consoles (PlayStation, Xbox, Nintendo Switch), tablets and smartphones.
  • Microsoft Family Safety allows you to manage screen time, content filters and app restrictions across Windows and Xbox devices.
  • For younger children, consider placing computers and tablets in shared family spaces rather than bedrooms.

3 Age-Appropriate Use

  • Most social media platforms (Instagram, TikTok, Snapchat, Facebook) require users to be at least 13 years old. Many are not suitable for younger children.
  • Check game age ratings (PEGI in the UK) before allowing children to play — an 18-rated game is not appropriate for a 10-year-old, regardless of what their friends are playing.
  • Review the privacy settings on your child's accounts and set them to the most restrictive level appropriate for their age.

4 What to Do if Something Goes Wrong

  • If a child discloses online abuse or grooming, listen calmly, reassure them they are not in trouble, and report it immediately to CEOP (ceop.police.uk) or the police.
  • If a child is being cyberbullied, save evidence (screenshots), report it to the platform, and contact the school if other pupils are involved.
  • Use the Report Remove tool from Childline (childline.org.uk) if intimate images of a young person under 18 have been shared online.

Business Cyber Essentials

Small and medium businesses are increasingly targeted by cybercriminals. These practical steps reduce your risk significantly.

1 Staff Awareness

  • Your team is your first line of defence. Ensure all staff understand how to recognise phishing emails, social engineering and suspicious requests.
  • Establish a clear process for reporting suspected security incidents — no blame, just prompt action.
  • Conduct regular refresher training, not just a one-off induction.

2 Access & Permissions

  • Follow the principle of least privilege — give staff access only to the systems and data they need for their role.
  • Remove access promptly when employees leave or change role.
  • Enforce multi-factor authentication on all business-critical accounts (email, cloud platforms, remote access).

3 Backup & Recovery

  • Maintain regular, verified backups of all business-critical data. Test restores periodically — a backup you've never tested is a backup you can't rely on.
  • Keep at least one backup copy off-site or in a separate cloud environment to protect against ransomware and physical disasters.
  • Document your recovery procedures so the business can resume operations quickly if the worst happens.
Need help securing your business? AAT Computer Solutions provides managed security services, infrastructure audits and ongoing support for organisations across South East London and Kent. Call 020 8144 4004 or email enquiries@aatcs.com.

Useful Resources

Trusted UK organisations offering free online safety information, tools and reporting services.

Concerned About Your Security?

Whether you've received a suspicious email, think your computer may be compromised, or simply want a professional review of your setup — we're here to help.