Office of the Comptroller of the Commonwealth of Massachusetts

Each October, the Office of the Comptroller marks Cybersecurity Awareness Month.  This year, we are pleased to be working hand-in-hand with the Executive Office of Technology Services and Security (EOTSS), and so many of our statewide partners to promote this important initiative.  Our shared goal is to keep public funds and information out of the hands of fraudsters.   We are encouraged to see the Commonwealth collaborating on this message, including our partners at the Executive Office of Technology Services and Security (EOTSS), the Executive Office for Public Safety and Security (EOPSS), the Massachusetts State Police, the Executive Office of Energy and Environmental Affairs (EEA), the Massachusetts State Police, MassDOT, the Massachusetts Technology Collaborative, the Mass Cyber Center, municipalities throughout the state, and private sector partners as well. Cybersecurity awareness, however, is not solely the responsibility of leadership and information technology.  All employees throughout the Commonwealth must be vigilant against bad actors.  Three simple steps that anyone, especially staff working in state finance, accounting, payroll, procurement, or contract roles can take to prevent most types of cyber attacks: Pause Verify Report. https://lnkd.in/e84adDjr

While music streaming platforms were keeping track of your tunes, The Office of the Comptroller was busy overseeing the Commonwealth's financial systems. Here are some statistics that show what we've been up to this past year. #SpotifyWrapped #Wrapped2024 #StateFinance

It is important that Commonwealth of Massachusetts departments immediately report any cyber incidents or other suspicious activity to departmental IT staff, even if the activity or email seems innocuous. For more information on what to do if you suspect a potential security/fraud incident, visit https://lnkd.in/e4s_ZJk7

This holiday season, expect an increase in phishing emails and texts offering things such as coupons, free gifts, or Black Friday deals just for you. Many of these offers are fraudulent and responding to them puts you at risk for financial loss or ransomware and viruses. To stay safe, follow these action steps provided by CTR. https://lnkd.in/efW36krb

International Fraud Awareness Week is a global campaign led by the Association of Certified Fraud Examiners (ACFE) and highlights the importance of fraud detection and prevention. Watch this short educational video from the ACFE to learn more about fraud awareness. https://lnkd.in/ggxK6pKA

Security access that gives you data immediately can be convenient. However, easy access also means greater risks for fraud and easier access for cybercrimes. See CTR’s action steps to help keep your data secure. https://lnkd.in/eqRasYGG #FraudPrevention #FraudAwareness

CTR is proud to support International Fraud Awareness Week, which starts today. Throughout this week, we will be posting about fraud awareness and what Commonwealth employees can do to support fraud. If you have evidence of fraud, waste, or abuse involving a Commonwealth of Massachusetts department, employee, or contractor, blow the whistle. https://lnkd.in/e4VtKDFP #FraudAwareness #Whistleblower

Our Risk Council Jenny Hedderman spoke on the human side of cybersecurity and the importance of strong internal controls for the Strengthening Security in the Age of Evolving Threats panel last week at the Massachusetts Public Sector Cybersecurity Summit. Thanks again to Gov Tech and all those who made this event a success! #RiskManagement #CybersecurityAwareness

Keeping current with software updates is critical to protecting your work and home networks, data, and operations. Security patches are the first line of defense to reduce vulnerabilities. Ensure that both your work and personal devices, software, operating systems, and virus protection are up to date with current patches; and validate that all emails, attachments, texts, and calls are from a known source. #CTRCyber https://lnkd.in/dJgM2m6g

Communicating the value of fraud prevention to your employees is essential for someone in a leadership position. Effective and efficient leadership means upgrading your cybersecurity awareness internal controls and building your team’s defenses by reinforcing cybersecurity awareness tips. The greatest benefit you can give to your employees is having your employees work together and reduce the risks we face when online and using connected devices. If you do not make cybersecurity a responsibility, then your organization is open to ransomware hackers and you can have the infrastructure of your organization be disrupted. See our cybersecurity tips page to keep your team cyber safe. #CTRCyber https://lnkd.in/dJgM2m6g