We've covered the first three items of the Essential Eight. This lesson covers two more - Administrative Privileges and Application Controls. The use of Administrative Privileges and Application Controlssounds super challenging, but are really simple in practice.

Administrative Privileges can be defined as a control system which authorise or prevents users from installing software and making changes to a computer system - changes that could compromise your system if used incorrectly. On your laptop or desktop computers, phones and other mobile devices, Administrative Privilege via controls make sure that when you install applications such as a new app, browser or any other software, your device asks you for either a password to your account, requires a fingerprint scan or in some other way requires something to confirm you want to install on or make changes to the device. Not all users will have Administrative Privileges and may require another user to assist by granting permission for a software installation or system change.

On a Windows device, make sure your everyday "user account" does not have automatic Administrative Privileges and that the system requires an administrator’s password or explicit installation approval in order to install or update applications like Word, Chrome updates or any other software. The website https://blog.acer.com/en/discussion/2418/how-to-turn-on-admin-privileges-in-windows-11 shows how to check if your account has administrator privileges. If you do, have a chat to your IT people, or your business leadership about addressing this properly. We can also assist you create a system or procedure for addressing this item.

If you're on a Mac device, MacOS controls are detailed in https://www.intego.com/mac-security-blog/understanding-user-accounts-in-macos/ - like Windows, it’s best to run your standard day to day account without administrator privileges and your IT crew can help you with this!

Mobile device such as iPhones, iPads and Android phones should all require your Apple or Google Play passwords to install software. See https://support.apple.com/en-gb/119848 for Apple devices and https://guidebooks.google.com/android/usetheappsonyourphone/protectyourgoogleplaypurchases?hl=en-au for Google/Android devices.

Closely associated with Administrator Privileges is Application Controls. The idea of application control is that the only applications that can run on your device are applications that you know to be safe and legitimate. Application controls are like rules and safeguards built into software to make sure it works correctly, securely, and only does what it's supposed to do. Think of them as the guardrails, locks, and safety features in your everyday life.

One of the most common small business application control system is a good virus protection system. These filter applications and stops unauthorised applications from starting. They make sure the software we run on our computers follow the rules and safeguards. Random downloads from the Internet are questioned and checked before they run free. The take-away question from this point asks, “Does your computer have a reputable virus and application system installed on it?”. We encourage you to ask your IT people about this!

On your portable device or phone, your Apple Store or Google Play store will play a huge part in protecting your phone, iPad or tablet. If your device is “jailbroken” (see https://www.techsafety.org/rootjailbreakcheck) then it can install software from any source, including a hacker who convinces you that their nasty software is legitimate! Jailbroken devices should not be used in a business environment with customer data or business information.

Lessons 3: Administrators and Applications