Combating cybercrime: every user’s digital responsibility

The internet has expanded opportunities for learning, communication, banking and everyday tasks. At the same time, users face risks involving personal data theft, unauthorised account access, online fraud and malicious software. Preventing cybercrime requires both organisational safeguards and responsible everyday behaviour by individual users.

Digital responsibility begins with protecting personal accounts and devices. Use a long, unique password for each important account, store passwords in a trusted password manager and enable two-step verification or multifactor authentication wherever available. Do not share verification codes or approve sign-in requests you did not initiate. These measures make it harder for outsiders to access an account. cisa.gov

Careful handling of suspicious messages is equally important. Statements such as “your account will be blocked”, “you have received money” or “an urgent instruction from your manager” may pressure users to act without checking. Even a link or payment request received from someone familiar should be verified through another communication channel. Their account may have been compromised, so a sender’s name or photograph does not guarantee that a message is genuine.

Keeping software updated, installing applications from official sources and checking the permissions they request can reduce risks. Protected backups of important academic, research and work documents are also useful. When using a shared computer, sign out after finishing and avoid saving passwords on the device. Official cybersecurity guidance identifies software updates, strong passwords and caution with unknown files as essential protective measures. CISA

Digital responsibility also means respecting other people’s rights. Do not attempt to access someone else’s account without permission, read private correspondence or disclose personal information without a lawful basis. Uzbekistan’s Law on Cybersecurity, No. ZRU-764 of 15 April 2022, regulates relations in this field. Users should exercise their access rights only within the purposes and limits for which permission was granted. lex.uz

If unauthorised access or a data disclosure is discovered, use official recovery tools from a secure device to change the password, end unfamiliar sessions and check account recovery details. Preserve relevant messages and screenshots. Contact the bank if funds are at risk, the institute’s responsible specialist if a work account is compromised, and the internal affairs authorities if criminal activity is suspected. Warn recipients if fraudulent messages have been sent from your account.

For students, teaching staff and employees, digital security is part of academic and professional activity. Reporting threats promptly, handling information carefully and following security procedures contribute to the protection of the entire institute community.