Celebrating Excellence: Mike Holcomb Named Practitioner of the Year – ICS/OT Defender, Community Choice Award

At Safeguards Consulting, we take immense pride in recognizing the outstanding achievements of our team members who go above and beyond to make a difference in security.  

Today, we are proud to spotlight our Senior Cyber Security Advisor, Michael “Mike” Holcomb, who has been honored with the prestigious Practitioner of the Year – ICS/OT Defender, Community Choice award at the 2025 SANS Difference Makers Awards. 

This distinguished award is a testament to Holcomb’s steadfast dedication, deep expertise, and impactful contributions in the critical field of Industrial Control Systems (ICS) and Operational Technology (OT) security. As cyber threats continue to evolve and pose significant risks to the infrastructure that powers our daily lives, safeguarding these systems has never been more vital. 

Advancing Cybersecurity Best Practices in Critical Infrastructure 

Holcomb’s commitment extends beyond day-to-day defense. Through thought leadership, mentoring, and hands-on guidance, he has been instrumental in advancing cybersecurity best practices within the ICS/OT community. His holistic approach combines technical expertise with strategic insight, enabling organizations to build robust security postures that adapt to the ever-changing threat landscape. 

His tireless efforts have not only mitigated risks for countless critical infrastructure operators but also fostered a culture of security awareness and proactive defense. This award reflects the high regard the community holds for Holcomb as an influential advisor, advocate, and innovator in the field. 

As he stated in the attached press release from SANS, “It can't be the OT side of the house and the IT side of the house. It's all the same house we live in, and we're trying to protect." 

Inspiring the Safeguards Consulting Team and Beyond 

Holcomb’s recognition as the Community Choice award recipient highlights the broad-based support and admiration he has earned from peers, clients, and industry leaders alike. At Safeguards Consulting, he stands as a shining example of professionalism and dedication that inspires our entire team to strive for excellence every day. 

His leadership encourages us to push boundaries, embrace new challenges, and continuously seek innovative solutions to protect the vital systems that underpin our society’s safety and functionality. 
 
Continued Leadership in Cyber Defense 

As we celebrate this remarkable achievement, we also look forward to his continued leadership in securing the future of industrial control systems and operational technology. His expertise remains a cornerstone of our mission to empower organizations with the knowledge and tools needed to defend against emerging cyber threats. 

On behalf of everyone at Safeguards Consulting, we are proud to extend congratulations to Holcomb for this well-deserved accolade. His contributions are not only advancing the field of ICS/OT cybersecurity but also making our communities safer and more resilient every day. 

To watch the entire award presentation, visit:  

https://youtu.be/2Lwch5NEkWs  

To view Holcomb accepting his award and to hear his speech, click: 

https://youtu.be/2Lwch5NEkWs?t=2724 

To learn more about the award, visit:  

2025 SANS Difference Makers Awards: The Winners and Moments That Defined the Night | SANS Institute 

Release of the December 2025 Safeguards Consulting Chronicle

Our team is proud to share that we recently released the December issue of our firm's monthly newsletter, The Safeguards Consulting Chronicle, and we would love to invite you to subscribe for free. This year, we are also proudly celebrating the Chronicle’s third anniversary!   

Our newsletter covers numerous industry events, news, and updates.  

Some of the items we included in our December issue were:       

+ A featured friend spotlight piece on our friend and past client, the US CPTED Association.   

+ An exclusive article written by our Physical Security and Fire Alarm Systems Specialist and Instructor, Donald “Don” McInnes, and our Marketing and Design Operations Specialist, Harris Rowe, entitled, “When Access Control and Life Safety Conflict - And When They Work Together”.    

+ A list of beneficial industry events, that includes events we are supporting/speaking at, as well as other events we recommend attending.      

+ Our list of useful blog articles.       

+ A selection of key industry news and updates.       

+ A quick industry tip provided by our experts.      

This month’s “Featured Friend” will also feature our friend and partner, BSides ICS/OT Miami.  

If interested, please subscribe using the hyperlink included below.     

https://www.safeguardsconsulting.com/newslettersignup?utm_source=SocialMedia&utm_medium=OrganicSocial&utm_campaign=2025-01-31_SGC-C_JanuarySMPostNewsletterSignUp&utm_content=Newsletter%20Signup%20Link%20Blog

When you subscribe to our newsletter, you gain access to all the exclusive security content mentioned above, as well as our newsletter archive, so that you never miss an issue! We hope these resources will help you in your role as a security professional. It also allows us to keep you updated regarding company news, updates, or events.  

Safeguarding The New Year: Security Assessments Should Be the Top New Year’s Resolution

As we enter a new year brimming with opportunities, many of us commit to resolutions aimed at bettering different areas of our lives, including our career operations. Yet, amidst these goals, one vital resolution is frequently overlooked: analyzing the security of your facility. At Safeguards Consulting, we are convinced that including a security assessment in your New Year’s resolutions could be the most valuable choice you make for your organization in 2026. 

Why Prioritize a Security Assessment? 

Every facility, whether it is a data center, utility, hospital, university, or even a commercial office, faces unique security challenges. As threats evolve, from physical intrusions and theft to unauthorized entry and safety risks, it is critical to remain vigilant. A thorough physical security risk assessment analyzes your existing systems, identifies potential flaws, and provides customized improvement strategies to improve your protection. 

What are The Benefits of a Security Assessment as a New Year’s Resolution?  

1. Identify Vulnerabilities Early: A physical security risk assessment can reveal gaps and flaws in your systems, processes, or physical environment before they are exploited by criminals or other perpetrators.  

2. Reduce the Risk of Breaches: By identifying and addressing security vulnerabilities, you reduce the opportunity for security incidents including violence, theft, damage, or other impacts that could disrupt your business or staff’s lives.  

3. Increase Peace of Mind: Having your team and staff know that your security measures are current and effective allows you to focus on your goals for the year without worrying about potential threats. 

4. Stay Compliant: Many industries have regulations that require specific security measures and operations. Regular assessments ensure that you stay compliant and avoid penalties.  

5. Optimize Security Investments: Understanding your security posture allows you to allocate resources wisely, investing in the tools and training that provide the best protection. 
 
Make 2026 the Year You Take Control of Your Security 

Avoid waiting for a security breach or incident to reveal weaknesses in your defenses. By scheduling a professional physical security risk assessment today, you are proactive in ensuring your facility's long-term safety and success. Our skilled team of security experts is ready to assist you in identifying risks and implementing effective strategies to protect what is most important. 

Secure Your New Year Today  

Begin your New Year's resolutions with a commitment that matters. Contact our team today to set up a security assessment and begin 2026 with confidence and peace of mind.  

Protecting and Securing Facilities During the Holiday Travel Season

The holiday season is a time for celebration, but for organizations, it also brings heightened security challenges. With many employees traveling or working remotely, facilities often operate with reduced staffing, creating opportunities for bad actors to exploit vulnerabilities. Proactive planning is essential to safeguard assets and maintain operational continuity during this period. 

When fewer employees are on-site, response times slow, and empty offices become attractive targets. Property crimes spike during the holidays: U.S. data shows property crimes increase by 10–15% in December compared to other months. Opportunistic theft, vandalism, and unauthorized access are common issues. Cyber threats also surge, as attackers exploit distracted teams and unattended systems. In fact, more than half of ransomware attacks occur during holidays or weekends, making this season particularly risky for organizations that rely on remote connectivity. 

Physical security gaps are one of the most pressing concerns. Reduced staff presence makes it easier for bad actors to tailgate or force entry. FBI data shows property crimes peaked in December 2024 with 66,676 incidents - a 10.8% jump from November. Retail theft alone rises by 14% during holiday months, and similar trends affect office spaces and warehouses. Cybersecurity vulnerabilities also escalate during this time. Holiday-themed phishing and account takeover attacks spike sharply; researchers tracked a 92% increase in malicious configurations targeting retail and a 400% increase against hospitality sectors ahead of the holiday season. Environmental hazards, such as winter storms, can further complicate matters by causing outages or damage if not properly monitored. 

To mitigate these risks, organizations should strengthen access control by updating credentials, deactivating unused badges, and restricting access to non-essential areas. Surveillance and monitoring systems should be tested to ensure cameras and alarms are fully operational, and remote monitoring or third-party security services can provide continuous oversight. Cybersecurity measures are equally critical, such as implementing multi-factor authentication for remote access, patching systems before staff leave, and communicating clear guidelines for secure remote work practices. Emergency preparedness is another key step: distribute updated contact lists and escalation procedures, and conduct quick refresher drills to ensure readiness. Finally, visitor and delivery management should be tightened by using digital systems to track entries and limiting non-essential traffic during low-staff periods. 

The holiday season should be a time of celebration, not concern. By taking proactive steps, strengthening physical security, reinforcing cybersecurity, and preparing for emergencies, organizations can minimize risks and maintain a safe, secure environment. A layered approach ensures that even when staffing is reduced, your facility remains protected.  

Author: Harris Rowe, Marketing and Design Operations Specialist at Safeguards Consulting, Inc.

References 

2024 ransomware holiday risk report. (2025, November 18). Semperis. https://www.semperis.com/resources/2024-ransomware-holiday-risk-report/ 

Crime trends in U.S. cities: Year-end 2024 update - Council on criminal justice. (2025, January 28). My WordPress. https://counciloncj.org/crime-trends-in-u-s-cities-year-end-2024-update/ 

FBI Releases 2024 Reported Crimes in the Nation Statistics. (n.d.). FBI News. https://www.fbi.gov/news/press-releases/fbi-releases-2024-reported-crimes-in-the-nation-statistics 

Karen Dooley. (2025, November 25). As holiday shopping season nears, UF experts warn retail theft is growing more sophisticated. News | University of Florida. https://news.ufl.edu/2025/11/uf-lprc-warns-of-growing-retail-theft/ 

Detecting Fake Account Recovery Emails

Account Recovery Phishing is a type of attack used by scammers to gain unauthorized access to user accounts. Attackers send emails or text messages claiming that you need to reset your password or provide personal information to verify your account. These account recovery messages and websites often appear to come from genuine companies, but if you look closely, they are fake.  

Kasada, a cybersecurity company specializing in account-takeover attacks, observed in its 2025 report, “a 250% increase in account takeover attacks […] resulted in over 6 million compromised accounts, affecting large brands across several industries, including retail, hospitality, travel, entertainment, and food and beverage.” While not all these attacks involved Account Recovery Phishing, this highlights the growing risk of account compromise, including threats that exploit password reset flows. The FBI reported in a recent Security Alert that account takeover fraud has already caused losses exceeding US$262 million in 2025.  

Why Is This Relevant?  

The holiday season creates prime opportunities for cybercriminals to launch phishing attacks. During this time, people’s attention and online activity change significantly. Many spend more time shopping online, logging in to banking apps, delivery services, and social media, making each login a potential target. 

Additionally, holiday activities such as shopping, travel, and family gatherings make people busier and more stressed, increasing the likelihood of overlooking warning signs in emails.  

Common Signs of an Account Recovery Phishing Attempt 

Phishing emails are designed to look like official communications from trusted sources, but there are usually clues that reveal they are fake. These are some of the most common signs of a phishing attempt that targets your password: 

1. Receiving unsolicited password recovery requests by email or text asking you to reset your password without initiating it yourself is the main warning sign. These messages may also claim your account has been compromised or that your password will expire soon. 

2. Account recovery emails that use generic greetings such as “Dear User” or “Dear Customer” instead of your name are suspicious. Legitimate companies typically have your contact details and will address you by your name for more personal communication. 

3. The use of urgent or threatening language can create panic and push you to act quickly without carefully verifying the message. Legitimate companies will not demand urgent action on this type of message. If you feel rushed or pressured, stop and evaluate the situation carefully. 

4. Account recovery emails that include suspicious attachments are a clear sign that something is not right. Legitimate password reset notifications typically do not include attachments, so any email with them should be treated with caution, as it may contain malware. 

5. The sender’s email address does not match the company domain, which is typically an indicator that the message is fake. Password reset messages are only sent from verified company domains. 

6. Misaligned logos, incorrect brand colors, low‑resolution images, or anything that looks unfamiliar are signs of fraudulent emails or websites. 

How to Protect Yourself  

A password reset request is a critical security measure and should not be taken lightly or ignored. If a security-related communication is received, it should be reviewed carefully. The following are tips to verify the authenticity of this type of notification, and additional advice to be better protected. 

1. Verify The Email Domain. 

When receiving a password request notification, pause and review that the sender’s email address is authentic and comes from the expected source. For example, Microsoft will not send emails from a Gmail account. Also, watch for subtle changes in the domain or intentional misspellings. For example, support@google.com is not the same as support@googIe.com where the lowercase “l” is replaced by an uppercase “i”.  Adding hyphens and dots is also common to trick the user.  

2. Look Closely at The Link. 

Cybercriminals often hide malicious links behind buttons or text. Hover over links without clicking to reveal the actual URL and inspect it closely to see where it really leads. Another tactic to hide links is the use of URL shorteners. Genuine companies typically do not use shortened URLs for password reset links, so be cautious. 

Even better is to avoid clicking the link directly and instead go to the website or the service’s application. Request a new password through the official “Forgotten password” feature.  

3. Use a Unique Password. 

Do not reuse passwords across multiple sites and services. Create a unique password for each account. This way, if one service is compromised, your other accounts remain secure. It is also highly recommended to use a password manager to store and manage your passwords. 

4. Use Multi-Factor Authentication. 

Review your accounts and enable Multi-Factor Authentication (MFA). Although attackers can sometimes bypass MFA during Account Recovery Phishing attacks by tricking users into providing their verification code, it still adds an additional layer of protection for your accounts. 

5. Protect Your Sensitive Information. 

Never provide sensitive information such as passwords, verification codes, or your Social Security Number, via email or text message. Reputable companies will not ask you to provide sensitive information over insecure channels. 

What to Do if You Think Your Account Has Been Compromised? 

In case your account has been compromised, the first step is to try to recover it through the official password reset process. If you are unable to regain access, contact customer support and notify them about the incident. This is especially important for financial institutions or e-commerce platforms, where they can freeze any activity, restore access, review transactions, and monitor the account for further abuse. 

Review purchase history, messages, login logs, account changes, and connected services. Document anything suspicious with screenshots and timestamps. Even if you cannot access the compromised account, you may still review email notifications, transaction and login attempt alerts, and messages from the service provider.  

Finally, it is highly recommended to submit a report through the Internet Crime Complaint Center (IC3), especially if the compromised account involves financial transactions or the exposure of sensitive information. 

Although this type of phishing is not new, it continues to be highly effective. Always verify any account recovery requests and practice strong security habits. 

Author: The Safeguards Consulting, Inc. Cybersecurity Team

Release of the November 2025 Safeguards Consulting Chronicle

Our team is proud to share that we recently released the November issue of our firm's monthly newsletter, The Safeguards Consulting Chronicle, and we would love to invite you to subscribe for free. This year, we are also proudly celebrating the Chronicle’s second anniversary, and in addition, this June, we celebrated our 30th anniversary issue!   

Our newsletter covers numerous industry events, news, and updates.  

Some of the items we included in our November issue were:       

+ A featured friend spotlight piece on our friend and past client, the Electric Power Research Institute (EPRI).  

+ An exclusive article written by our Principal Consultant and President, Mark Schreiber, “The Underlying Value of Physical Security Systems”.    

+ A list of beneficial industry events, that includes events we are supporting/speaking at, as well as other events we recommend attending.      

+ Our list of useful blog articles.       

+ A selection of key industry news and updates.       

+ A quick industry tip provided by our experts.      

This month’s “Featured Friend” will also feature our friend and partner, US CPTED! We will also have two guest speakers, Harris and Don, writing this month’s Expert Article. Harris Rowe is our Marketing and Design Operations Specialist, and Donald “Don” McInnes is our Physical Security and Fire Alarm Systems Specialist and Instructor.   

If interested, please subscribe using the hyperlink included below.     

Newsletter Signup — Safeguards Consulting, Inc.

When you subscribe to our newsletter, you gain access to all the exclusive security content mentioned above, as well as our newsletter archive, so that you never miss an issue! We hope these resources will help you in your role as a security professional. It also allows us to keep you updated regarding company news, updates, or events.  

Schreiber Aids SIA’s SPARC and VOI Committees with Their New Artificial Intelligence (AI) Report

Safeguards Consulting is proud to announce that our President and Principal Consultant, Mark Schreiber, recently contributed to the Security Industry Association (SIA)’s Security Practitioners Advancing Real Conversations (SPARC) Community, as an original draft author and content contributor. As a member of SIA’s Voice of Industry (VOI) Steering Committee, Schreiber played a key role in creating the new SPARC Intelligence Report: Guidance for Evaluating Artificial Intelligence Vendors/Service Providers. VOI and SPARC developed this report with valuable input from the SIA AI Advisory Board and the International Association of Professional Security Consultants (IAPSC). 

Among the others who contributed to the report are:  

+ Bobby Louissaint | SPARC Chair 

+ King Lam | SPARC Vice Chair 

+ Phil Jang | SPARC VOC Rep 

+ Julaine Simmons | VOI Chair 

+ Brad Aikin | VOI Vice-Chair 

+ Heidi Tripp | VOI Vice-Chair 

+ Josh Chin | VOI Member and Content Contributor 

+ James Connor | VOI Member and Content Contributor 

Overall, the report aims to clarify the specific AI technologies employed in various security solutions by establishing consistent terminology and educating industry professionals in their respective roles. Additionally, it offers a practical questionnaire for end users to utilize when evaluating physical security solutions, ensuring that all stakeholders have a clear and accurate understanding of the core AI technologies involved. Given that the content spans multiple technology areas and industry domains, this paper also serves as a comprehensive guide for navigating the complex landscape of AI in security. 

We hope this report offers valuable insights to support you in your role and that you find it both informative and helpful. 

To read the report, visit:  

SPARC Intelligence Report: Guidance for Evaluating Artificial Intelligence Vendors/Service Providers - Security Industry Association 

To learn more about Schreiber’s involvement in the VOI Committee and the SPARC Community, visit:  

https://www.safeguardsconsulting.com/knowledge/schreiber-joins-sias-voice-of-the-industry-voi-committee-to-assist-security-practitioners-advancing-real-conversations-sparc  

Release of the October 2025 Safeguards Consulting Chronicle

Our team is proud to share that we recently released the October issue of our firm's monthly newsletter, The Safeguards Consulting Chronicle, and we would love to invite you to subscribe for free. This year, we are also proudly celebrating the Chronicle’s second anniversary, and in addition, this June, we celebrated our 30th anniversary issue!   

Our newsletter covers numerous industry events, news, and updates.  

Some of the items we included in our October issue were:       

+ A featured friend spotlight piece on our friend and newest client, the Isuzu North America Corporation.  

+ An exclusive article written by our Principal Consultant and President, Mark Schreiber, “Security Compliance: Helpful or Limiting?”.    

+ A list of beneficial industry events, that includes events we are supporting/speaking at, as well as other events we recommend attending.      

+ Our list of useful blog articles.       

+ A selection of key industry news and updates.       

+ A quick industry tip provided by our experts.      

This month’s “Featured Friend” will also feature our friend and past client, EPRI!    

If interested, please subscribe using the hyperlink included below.     

Newsletter Signup — Safeguards Consulting, Inc. 

When you subscribe to our newsletter, you gain access to all the exclusive security content mentioned above, as well as our newsletter archive, so that you never miss an issue! We hope these resources will help you in your role as a security professional. It also allows us to keep you updated regarding company news, updates, or events.  

Safeguarding Yourself from The Surprising Dangers Lurking Behind QR Codes

Malicious QR Codes are Hidden Everywhere  

QR codes have become a common part of everyday life. They can be found in restaurants, parking lots, social events, product packaging, and even in unexpected places, like on modern gravestones. It is understandable, after all, that they are easy to use and very practical. We are so used to seeing them everywhere that it is easy to overlook the risks they can carry. According to the Anti-Phishing Working Group (APWG) in its Q1 2025 report, over 1.7 million unique malicious QR codes were detected by cybersecurity researchers, along with “an average of 2.7 million emails with QR codes attached daily”.

How Does a Malicious QR Code Function?  

QR codes work by encoding information into a square pattern that can be read by a scanner or camera. This information can include a URL, text, or contact details. QR codes are fast, reliable, and capable of storing much more data than traditional barcodes. However, because the content is encoded within the pattern, attackers can exploit this to hide malicious links or actions. Some devices and apps show a preview before opening a link, but not all do, and users often do not inspect the preview carefully, making QR codes a useful tool for phishing and other malicious attacks. 

QR codes Can Be Exploited in Various Different Ways 

1. Phishing Campaigns (Quishing) 

Attackers can embed URLs in QR codes that redirect users to phishing sites designed to steal personal information, login credentials, or financial details. Since users often do not see or carefully check the URL before opening it, they may not realize they are being directed to a fraudulent website. This tactic is widely used because of its high effectiveness. 

2. Malware Distribution 

QR codes can also direct users to websites that prompt users to download malicious software onto their smartphones or computers. If users proceed with the installation, the software can infect their devices with malware. Although most devices require user permission to complete the installation, attackers often rely on social engineering tactics to overcome users’ caution. 

3. Fake Payment Requests 

Scammers can create fake QR codes or replace legitimate ones in public places (known as QR code tampering), to redirect payments to their own accounts. This method is commonly used in situations like parking meters, charity donations, or sending them via email or chat, tricking victims into unknowingly sending money to cybercriminals. 

5 Quick and Easy Steps to Take in Order to Safely Scan and Verify QR Codes 

There are 5 steps that one can easily and quickly take to better safeguard themselves and their data against Malicious QR codes.  

1. Inspect The QR Code Source 

Before scanning a QR code, make sure it comes from a trusted source. Be cautious of codes found in public places that look out of place, are poorly printed, or appear to be stickers placed over original codes. Watch out for posters or messages with QR codes that try to grab your attention or offer something that seems too good to be true. 

2. Verify the URL Before Clicking  

Most modern smartphone cameras display a preview of the link or information encoded before opening it, allowing users to review what type of content is behind the QR code. Before clicking any links, always take a moment to verify the URL is legitimate and a trusted website and not an imitation with misspellings or suspicious characters. Be cautious with shortened or unclear links, as attackers may use link obfuscation to hide malicious destinations. If anything looks off, it is safer to type the known URL manually into your browser.  

 In case your device does not display a preview of the QR code, consider installing a camera or scanner app that allows you to view the content before opening it. Always use trusted QR code scanning apps from reputable sources to ensure your security. 

 3. Avoid Entering Sensitive Information 

Never enter sensitive information on websites accessed through QR codes unless you are certain the site is legitimate and secure. Cybercriminals can create fake websites to steal personal identifiable information, login credentials, credit card numbers, or other confidential data. If scanning a QR code opens a form asking for personal details, especially in a public space, consider it a red flag and think twice before entering anything. Always verify that the site uses a secure HTTPS connection and that the domain name is correct and trusted. You can also search for the site online for verification. 

4. Do Not Download Files from QR Codes 

QR codes can take you to websites asking you to download files, especially software or apps. While this might seem convenient, it is a common method used by cybercriminals to install malware. Unless you trust the source, avoid downloading anything it points to. Instead, use official app stores or trusted websites when downloading or installing software. 

 5. Keep Devices Updated and Use Anti-Malware Software 

It is important to make sure that your device and apps stay updated. Those updates often fix security vulnerabilities that cybercriminals could exploit. Additionally, installing anti-malware software adds another layer of security and can help detect and block potential threats before they cause harm. 

Stay Safe and Stay Aware  

Using QR codes to deliver attacks remains a common and growing threat in 2025. This technology has become a part of everyday life, and most people use it without a second thought. That convenience also makes QR codes an easy target for cybercriminals. As technology advances, so do the tactics used to exploit it. That is why staying alert matters. Taking a moment to check a link can help you avoid much bigger problems. 

Author: The Safeguards Consulting, Inc. Cybersecurity Team 

Embracing Connection and Growth through SMPS Palmetto and The AEC Industry: A Reflection Piece from Our Marketing Operations Lead

In May 2022, amidst my college academics, at North Greenville University, I decided to kick-start my career early as I began my first internship. The internship was with Safeguards Consulting, Inc., which is a private technical consulting firm based in Greenville, South Carolin, as a Marketing Operations Specialist.  

At this point, you may be wondering what an employee at a physical security firm is doing writing a blog post related to the Society for Marketing Professional Services (SMPS) Palmetto Chapter. Our firm collaborates with AEC firms so that we can work closely with our clients to address their security needs and provide solutions to their critical facility needs as their most trusted advisor. Furthermore, our team has extensive experience with large enterprise systems, whose size and integration challenges offer a unique specialty that we believe will benefit our AEC friends.  

When I first started at Safeguards Consulting, I had limited work experience and little to no knowledge of security and the Architecture, Engineering, and Construction (AEC) industry. However, two years later, I am proud to say that I am now the firm's Marketing Operations Lead and an active member as well as Committee Director of SMPS Palmetto. Over the last three years, I have gained a wealth of knowledge and expertise through my work at Safeguards Consulting. My experience with Safeguards Consulting also influenced my decision to join SMPS Palmetto through my firm in March of 2024.  

Joining SMPS has profoundly changed both my career and my perspective on the marketing and professional services industries. As I reflect on my time spent so far as a member, I am excited to share my positive experience as someone who was new to the industry.  

SMPS's professional development resources have helped me significantly expand my network. I have had the opportunity to make meaningful connections with professionals from various industries. The relationships I have formed through SMPS have also led me to community, invaluable insights, and new opportunities; each of which has contributed to my success in the workplace.  

From the moment I joined, I was welcomed into a vibrant community of marketing professionals who are passionate about their work and dedicated to excellence. The camaraderie and support I found within the SMPS network helped to push myself outside of my boundaries and expand my industry knowledge. Whether attending local chapter events like our monthly Empower Hours, online webinars, or our annual conference, I have had the opportunity to connect with numerous industry leaders and peers who inspire and motivate me. As someone who was new to the industry and still learning how things work, our members have been an excellent resource to me. My relationships with them have helped me develop my networking skills, broaden my knowledge of the AEC industry, gain valuable industry insight, receive useful industry advice, and improve my overall skills.  

Additionally, as a woman in the security industry, it has been particularly refreshing to see and meet so many outstanding women from the AEC industry through SMPS. Additionally, being a younger woman, it is extremely empowering to see so many women in higher-level leadership positions collaborating to advance and grow the industry. The female SMPS members have not only been encouraging, but they have also served as excellent role models and mentors.  

One of the most significant advantages of being an SMPS member is access to an abundance of educational resources and invaluable insights. From proposal expertise and website design advice to navigating AI, SMPS has it all covered with a variety of workshops, seminars, and webinars focusing on the latest trends, strategies, and best practices in marketing professional services. These learning opportunities have not only improved my skills but have also given me the authority to implement innovative approaches within our company. The knowledge gained has been extremely useful in navigating the complexities of our ever-changing industry.  

In addition, SMPS has encouraged me to pursue new opportunities. Several examples include serving on my first industry committee, attending my first solo conference, and joining my first industry organization. All these new opportunities and experiences came to me as a result of my wonderful connections with other SMPS members. Aside from professional development, SMPS has instilled in me a sense of purpose and dedication to giving back to the community. Volunteering for various initiatives and committees has allowed me to give back to the organization while developing my leadership skills. Working alongside dedicated professionals to advance the industry has been both rewarding and empowering. Since March of last year, I have been proudly serving on the Communications Committee. I served as our Communications Committee Co-Director last term, and as of this month, I am starting my new role as Director for the 2025 – 2026 term. So far, it has been a fantastic experience for me, as I have gained valuable knowledge by learning about many new software programs/tools and how an industry committee operates.  

In conclusion, my experience as an SMPS member as a newcomer to the industry has been nothing short of transformative. The combination of mentorship and community, invaluable insights, and new opportunities has enriched my professional life in numerous ways. I encourage anyone in the marketing field, particularly in professional services, to think about joining SMPS or a similar industry organization, especially if they are new to the AEC industry. Additionally, I challenge them to also consider partaking in a volunteer position within the organization to further deepen their connections and growth. This said, accept the opportunity to learn, connect, and thrive in an environment that values growth and excellence. Together, we can elevate our industry and leave a lasting impact.  

I would also like to conclude by thanking my firm, Safeguards Consulting, for sponsoring my membership, our chapter members, and the Communications Committee for welcoming me with open arms, and all the wonderful connections I have made along the way. Thank you for investing in me and my potential.  

Sincerely, 

Parker Stalvey  

Marketing Operations Lead, Safeguards Consulting, Inc. 

Communication Committee Director, The SMPS Palmetto Chapter  

Volunteers Requested for SIA’s VOI Steering Committee to Aid SPARC

We are proud to share that our Founder, Mark Schreiber, along with our firm, is honored to support the collaborative partnership between the International Association of Professional Security Consultants (IAPSC) and the Security Industry Association (SIA).  

SIA Creates the Voice of Industry (VOI) Steering Committee 

One key function related to this partnership is Schreiber’s participation in the SIA Voice of Industry (VOI) steering committee supporting the SIA Security Practitioners Advancing Real Conversations (SPARC) community, which is designed to better serve and support their end-user and security practitioner members. 

Who Makes Up the Security Practitioners Advancing Real Conversations (SPARC) Community? 

Also known as the SIA Technical End User Forum, this community brings together large end users and security practitioners.  

Its mission is to empower technical professionals by fostering a diverse support network that advances the security technology industry while actively participating in technology standards and compliance. Their members also benefit from vendor-neutral guidance, the latest research insights, and access to a wide range of training and networking opportunities.  

Their Technical End User Forum is also founded upon 3 bodies/committees: 

Membership: Offers opportunities for networking, group benchmarking sessions, personalized benchmarking, and engaging in face-to-face meetings. 

Voice of the Industry: Facilitates discussions with manufacturers, integrators, and specifiers to address industry needs, challenges, and expectations. You can learn more about this committee in the section below...  

Support Services: Delivers subject matter expert assistance for key industry products and actively participates in standards development and technical compliance initiatives. 

Some of the big names that are volunteer leaders within the SPARC committee are: + Jonathan Aguila, Meta (Executive Sponsor; Member, SIA Board of Directors and Executive Committee) 

+ Bobby Louissaint, Meta (Chair, SPARC) 

+ King Lam, Apple (Vice Chair, SPARC) 

+ Ruben Aceves, Microsoft 

+ Joe Gittens, Meta 

+ Dan Glick, Twillio 

+ Josh Heisler, Amazon 

+ David Hernandez, Disney 

+ Derik Hernandez, Meta 

+Philip Jang, TikTok USDS 

To explore SPARC in greater detail or if you would like to join, visit to learn more:  

SPARC: SIA's Technical End User Forum - Security Industry Association 

What is the Voice of Industry (VOI) Steering Committee, and What Do Their Members Do?  

The committee’s role is to offer industry insights to the Security Practitioners Advancing Real Conversations (SPARC) community upon their request, delivering supplier, vendor, and solution provider expertise in an unbiased, vendor-neutral way. Additionally, the committee contributes by creating white papers to further support and enrich the SPARC community. 

To learn more about VOI in detail, visit:  

VOI-Structure.pdf 

Why and How to Sign Up to Volunteer? 

You may be curious about the significance of volunteering and participating in an industry committee, not just for the benefit of the industry, but also for your personal career growth. To shed light on this, Schreiber offered the following insight from his own experience: “End Users do not have many forums to discuss their technology operations challenges, and the SPARC group provides a trusted venue for these discussions.  Being a volunteer for the SIA VOI allows industry suppliers to hear about these challenges that are amplified by SPARC and assist in advancing the industry to meet the needs of the end users.” 

Volunteer and Further the Industry  

We hope you will join us in supporting their efforts by volunteering on a committee with us or by sharing their volunteer opportunities with your network!  

To learn more about the volunteer opportunities or to sign up, visit:  

Volunteers Wanted! Join SPARC's Voice of the Industry Community - Security Industry Association 

Release of the June 2025 Safeguards Consulting Chronicle

Our team is proud to share that we recently released the June issue of our firm's monthly newsletter, The Safeguards Consulting Chronicle, and we would love to invite you to subscribe for free. This year, we are also proudly celebrating the Chronicle’s second anniversary.  

This June we also celebrated our 30th anniversary issue!  

Our newsletter covers numerous industry events, news, and updates.  

Some of the items we included in our June issue was:    

+ A featured friend spotlight piece on IAPSC.    

+ A exclusive article written by our Founder, Mark Schreiber, “Understanding AI: Modern "Narrow AI" Solutions”.  

+ A list of beneficial industry events, that includes events we are supporting/speaking at, as well as other events we recommend attending.    

+ Our list of useful blog articles.     

+ A selection of key industry news and updates.     

+ A quick industry tip provided by our experts.    

This month’s “Featured Friend” will also be one of our supported charities, Upstate Warrior Solution (UWS)! During this issue, we will also be highlighting our team’s recent visit to their Rupert Huse Veteran Center (RHVC).  

If interested, please subscribe using the hyperlink included below.    

Newsletter Signup — Safeguards Consulting, Inc.    

If you subscribe to our free newsletter, you gain access to all the exclusive security content mentioned above as well as additional content we hope will help you in your role as a security professional. It is also a wonderful way for my firm to stay in contact with you regarding company news, updates, or events, so please consider subscribing in time for our July issue!    

Schreiber’s Panel Session with Industry Leaders at SIA’s Perimeter Protect Event in Washington

Our Founder, Mark Schreiber, had a wonderful day representing us this past Wednesday, June 18th, 2025, in Washington, D.C., while attending the prestigious Perimeter Prevent event hosted by the Security Industry Association (SIA) at the National Housing Center. This event gathered top experts and leaders in the security field to discuss the latest innovations and strategies for protecting critical infrastructure and high-security perimeters. 
 
Schreiber also had the honor of participating in a dynamic panel session titled “CPTED and Best Practices for High-Security Perimeters,” which took place from 1:30 p.m. to 2:30 p.m. The conversation was enriched by the insights of his fellow panelists: Christa Decker, Vice President of Whitman, Requardt & Associates, and Douglas Dreher, Director of Data Center Development at Gibraltar Perimeter Security. 

During the session, the panelists explored how Crime Prevention Through Environmental Design (CPTED) principles can be effectively integrated into modern perimeter security solutions. They discussed practical strategies for balancing technological advancements with thoughtful environmental design to deter threats before they emerge.  

The event also provided an excellent opportunity for networking and exchanging ideas with other security professionals, policymakers, and industry innovators.  

Thank you to the SIA for an inspiring day and experience. Additionally, thank you also to everyone who attended Schreiber’s session!  

To learn more about the conference, visit:  

Perimeter PREVENT - Security Industry Association 

Release of the April 2025 Safeguards Consulting Chronicle

Our team is proud to share that we recently released the April issue of our firm's monthly newsletter, The Safeguards Consulting Chronicle, and we would love to invite you to subscribe for free. This year, we are also proudly celebrating its second anniversary, and in June, we will publish our 30th newsletter! 

Our newsletter covers numerous industry events, news, and updates.  

Some of the items we included in our April issue was:    

+ A featured friend spotlight piece on Pattern Energy.    

+ An exclusive article written by our Founder, Mark Schreiber, “1 False Hope of Artificial Intelligence?”.  

+ A list of beneficial industry events, which includes events we are supporting/speaking at, as well as other events we recommend attending.    

+ Our list of useful blog articles.     

+ A selection of key industry news and updates.     

+ A quick industry tip as provided by our experts.    

This month’s “Featured Friend” will also be our client, Scout Motors! 

If interested, please subscribe using the hyperlink included below.    

Newsletter Signup — Safeguards Consulting, Inc.    

If you subscribe to our free newsletter, you gain access to all the exclusive security content mentioned above as well as additional content we hope will help you in your role as a security professional. It is also a wonderful way for my firm to stay in contact with you regarding company news, updates, or events, so please consider subscribing in time for our May issue!    

Schreiber Joins SIA’s Voice of the Industry (VOI) Committee to Assist Security Practitioners Advancing Real Conversations (SPARC)

Safeguards Consulting is proud to share that our Founder, Mark Schreiber, is furthering his involvement in the Security Industry Association (SIA) even more!  

Recently, Schreiber joined an esteemed group of experts to form one of SIA’s newest committees, the Voice Of the Industry (VOI) committee. This committee falls under SPARC’s umbrella of 3 bodies, which are membership, VOI, and support services. The VOI committee focuses on engaging with manufacturers, integrators, and specifiers to discuss industry needs, concerns, and expectations.  

One of the ways the new committee is seeking to grow and improve the industry is by assisting the Security Practitioners Advancing Real Conversations (SPARC) committee, which is also known as the SIA Technical End User Forum, with white papers to support large end users in and outside of SPARC.  

SPARC is a new community of security professionals brought together to support end-user technical practitioners with a large network of technical professionals. These professionals all seek to deliver impact in the security technology industry while also engaging and encouraging compliance with technology and industry standards. In addition, SPARC’s members are provided with state-of-the-art security technology research, training, and networking opportunities, among other things! 

To learn more about the Security Industry Association (SIA), visit:  

Security Industry Association (SIA) - Information. Insight. Influence. 

To learn more about Security Practitioners Advancing Real Conversations (SPARC), visit:  

SPARC: SIA's Technical End User Forum - Security Industry Association 

If you are interested in learning more about the Voice Of the Industry committee, consider following us on social media or subscribing to our free newsletter to receive updates as Schreiber continues to serve and advance the industry with his VOI peers! 

To subscribe to our newsletter, The Safeguards Consulting Chronicle, visit:  

Newsletter Signup — Safeguards Consulting, Inc. 

Celebrating 15 Years of Trusted Advisory

At Safeguards Consulting, Inc., our journey began 15 years ago on April 7th, 2010, in the beautiful Upstate of South Carolina, with a vision to create a consulting firm that would make a meaningful difference in the world of physical security design and technology consulting.  

Our Founder, Mark Schreiber, who has over 25 years' worth of experience within the industry, recognized the need for trusted advisors within our industry to share valuable institutional knowledge and serve the many organizations that remain vulnerable and in need of guidance.  

Starting solo, Schreiber helped as many organizations as possible until he needed to expand to a team of trusted advisors with diverse backgrounds and skill sets to support our many clients.  Through a deep pool of experience and development of advanced processes, we address the pressing need for comprehensive physical security consulting solutions. We also recognized that physical security is not a one-size-fits-all solution as each client's needs and challenges are unique, so our team of consultants works closely with security stakeholders to meticulously assess their existing security measures, identify vulnerabilities, and develop tailored strategies to fortify their defenses.  

When we asked Schreiber to reflect upon our anniversary milestone, he stated, “It is amazing how much we have accomplished over this time, but it has moved quickly as we are always addressing new challenges and supporting new clients.  I am most proud of my team that has never wavered from the highest level of quality serving our amazing clients”.  

Over the years, we have grown alongside our clients, responding to new security challenges and evolving threats. 2025 is predicted to be our biggest year yet, but our success is built on the trust you have placed in us - trust formed by transparent communications and information sharing, tailored services, and our relentless passion to protect others with a servant’s heart.  

Today our team proudly serves numerous clients worldwide alongside our partners. In addition, we also serve within the security industry community by providing education, resources, and advice to further the industry and our mission to protect and serve others as trusted advisors.  

Thank you for making us your trusted advisors for 15 years. In addition, thank you also to our partners and industry peers for their support. Most of all, thank you to our team for your efforts and passion.  

Therefore, here's to many more years of serving as trusted advisors!  

If you would like to learn more about our history or how we can help secure your future, please reach out to our team today by using the link below!  

Safeguards Consulting, Inc. 

Contact — Safeguards Consulting, Inc. 

If you would like to stay in contact with us on a more frequent basis, consider subscribing to our free newsletter, The Safeguards Consulting Chronicle, which will be proudly celebrating its 30th issue this June.  

Newsletter Signup — Safeguards Consulting, Inc. 

Release of the January 2025 Safeguards Consulting Chronicle

We are proud to share that we recently released the January issue of our firm's monthly newsletter, The Safeguards Consulting Chronicle, and we would love to invite you to subscribe for free. This year we are also proudly celebrating its second anniversary!  

Our newsletter covers numerous industry events, news, and updates.  

Some of the items we included in our January issue was:    

+ A featured friend spotlight piece on GDS Associates.    

+ A exclusive article written by our Founder, Mark Schreiber, “The Key Value of Physical Security Business Relationships”.  

+ A special New Year’s message. 

+ A list of beneficial industry events, that includes events we are supporting/speaking at, as well as other events we recommend attending.    

+ Our list of useful blog articles.     

+ A selection of key industry news and updates.     

+ A quick industry tip as provided by our experts.     

This month’s featured friend will also be our partner, Sasaki Associates!   

If interested, please subscribe using the hyperlink included below.    

Newsletter Signup — Safeguards Consulting, Inc.    

If you subscribe to our free newsletter, you gain access to all the exclusive security content mentioned above as well as additional content we hope will help you in your role as a security professional. It is also a wonderful way for my firm to stay in contact with you regarding company news, updates, or events so please consider subscribing in time for our February issue!    

Strengthening Security: Milestones for Schreiber and SIA's Counter-UAS Working Group

Safeguards Consulting is proud to share an exciting update from our Security Industry Association (SIA) friends and our Founder, Mark Schreiber!  

Our firm is proud to have had Schreiber actively representing us within SIA's Counter-UAS Working Group for the past few years since its inception, and we are excited to see what they achieve together within this new year. This group of esteemed experts, founded in 2023, focuses on actively supporting, "the work needed to accomplish the recommendations of the Domestic Counter-UAS National Action Plan put forth by the Biden administration and further educate and give authorities options to mitigate UAS attacks".  Additionally, the group also collaborates with external organizations while also recruiting other industry experts aligned to track and monitor supportive legislation; and identify, educate, and engage with legislators. 

Some of their major milestones thus far include:  

+ Leading presentations at the SIA GovSummit and ISC Security Events conferences 

+ Authoring a series of articles on important drone and counter-UAS topics.  

+ Communicated support for S. 1631, the Safeguarding the Homeland from the Threats Posed by Unmanned Aircraft Systems Act of 2023.  

+ Providing topic input for the U.S. Department of Homeland Security speaker at the SIA National Capital Region Security Forum’s June 2023 counter-UAS event 

And so much more!  

However, the group has also recently provided guidance to SIA in their new blog post, "How to Spot a Drone: Guidance From Experts in SIA's Counter-UAS Working Group - Security Industry Association". In the blog post, Lauren Bresette, Senior Manager of Government Relations at SIA, outlines essential strategies for identifying drones in various environments. The post also emphasizes the importance of understanding drone characteristics, including size, shape, and sound, as well as the context of their operation, such as location and time of day. Additionally, Bresette highlights various guidance from the Counter-UAS Working Group, providing readers with practical tips for recognizing drone activity and distinguishing it from other aerial objects. The piece advocates for awareness and vigilance in both public and private spaces to enhance safety and security, especially in sensitive areas.  

We hope you will consider reading their piece in full as linked below as it serves as a valuable resource for those seeking to improve their ability to spot drones and respond appropriately.  

Stay tuned for more updates as they continue their efforts to combat drone threats!  

To learn more about SIA's Counter-UAS Working Group, visit:  

Counter-UAS Working Group - Security Industry Association 

To read the full article, visit:  

How to Spot a Drone: Guidance From Experts in SIA's Counter-UAS Working Group - Security Industry Association 

Schreiber’s Insights Shine from OSAC’s 2024 Annual Briefing at Amazon's HQ2

We are thrilled to share that our Founder, Mark Schreiber, had an incredible experience representing our team at this year’s OSAC Annual Briefing held at Amazon's HQ2 in Arlington, VA, on November 20 and 21! This prestigious event serves as a cornerstone for security collaboration, uniting thousands of U.S. Department of State (DSS) and private-sector security representatives under one roof. 
 
The overarching mission of OSAC is to foster security cooperation between the U.S. private sector and the DSS by building a global network of security professionals committed to exchanging timely information and sharing best practices. This year, the event attracted over 12,000 attendees from more than 6,000 organizations, all dedicated to mitigating risks to U.S. interests worldwide. 

Schreiber had the opportunity at this year’s briefing to engage with other leaders in the security field, exchanging insights and strategies that will help bolster safety and preparedness across various industries. The collaborative environment encouraged discussions about emerging threats and innovative solutions, underscoring the importance of proactive risk management in today’s complex landscape. 

This year’s briefing covered numerous topics such as... 

+ The State of OSAC 

+ Biological Threats and National Security 

+ Threats and Cybersecurity  

+ Mental Health in The Security Industry  

+ Crisis Communications  

+ Employee Hostage Situations 

+ Global Maritime Security Challenges  

The briefing also included numerous networking opportunities, breakout sessions, and many more opportunities for growth and insights.  

Afterward, Schreiber followed up with our team stating, “This year’s OSAC Annual Briefing was extremely well attended with a very large number of influential organizations, and it was great to participate in risk discussions with so many leaders to keep us engaged on emerging risks and geopolitical changes for multi-national organizations.”.  

Stay tuned for more updates as we begin to integrate the insights from this exceptional experience into our ongoing efforts! We also look forward to utilizing the information gained from this year’s conference when serving our clients as their trusted advisor.  

We would also like to thank our wonderful Amazon friends and their Vice President of Public Policy Americas, Steve Hartell, for hosting us this week!

Additionally, we also would like to thank this week’s speakers!

G.B. Jones

Ross Murray

Antony J. Blinken

Adam Calabro

Allison Cash Spiro

Andrea Campbell Drake

Andreea Patra

Andrew Dyer

Angela Lewis

Arian Avila

Asa Zuberman-Leibman

Ayesha Usmani

Ben Brandt

Benjamin Bosland

Bill Powers  

Brooke Kassner-Matz

Bryan Parent

Carlos Matus

Christopher T. Macolini

Cormac Mc Garry

Cory Bergman

Cris Bohanski

Daniel Giordano 

Danny Holtsclaw

David Fortino

Diana M. Concannon  

Dr. Charity Dean

Dustin Stewart 

Edward Levy

Elizabeth Gracon 

Emily Caldwell

Eva DeBella  

Gharun S. Lacy

Giovanni Gravano

Greg Wurm

Heather Suguitan-Lee

Hussein Abdallah

Jack Suwanlert

Jackie Day

James Weston

Jeff Chase 

Jeffrey T. Gilbert

Jeremy Rodrigues

Jerry Tavares

John Cory  

John Parrotte

Jonathan Welch

Joshua Levin-Soler

Kate Stubbe

Kathy Lavinder

Katie Timothy

Kendall R. Donahue

Konrad Brayer

Kristin Lenardson

Kristin Toth

Kristine Raad

Laura Clark

Liz Cathcart

Liz McNally

Logan Etheredge

Luis Matus

Mackenzie Grahek

Paul Friedrichs

Malique Carr

Marc Solomon

Marcia Henisz

Maria Robson-Morrow

Mary Hackman

Matt Clark

Matthew Mead

Maureen Handrahan

Melanie Getreuer

Melanie Higgins

Michelle Rowe

Nicholas Collura

Nick Lovrien

Nila Hayes

Paul Whelan

Pearl Francisca D'Souza

Peggy O’Neill

Phil Walker

Rachel Briggs

Rafael Saliés

Rajiv S. Maan

Ryan Wismer

Sam Vicroy

Sarah Thompson

Scott Kim

Shaun M. Jamieson

Steve Hartell

Stone Conroy  

Susana Svojsik  

Thomas Murray

Tim McAtee

Tobi Rosenzweig

Tom Sanderson

Tommy Jones

Vitaliya Peake

Safeguard Your Holidays: Essential Cybersecurity Tips to Protect Your Festive Season

The holiday season is approaching, and with it comes a time for celebration, shopping, and giving. However, it also creates opportunities for cybercrime, especially during major holiday shopping sale events such as Black Friday and Cyber Monday. While we are busy looking for the best holiday deals and preparing for family gatherings, cybercriminals are planning attacks to steal personal information, financial details, and sensitive data. 

With retailers offering massive discounts, shoppers are often quick to click on links, share payment details, and make impulsive purchasing decisions, frequently overlooking the potential risks of trusting a platform without caution. Scammers and hackers exploit this urgency by spreading fake deals, phishing emails, and malware-infected links to deceive unsuspecting buyers. 

If you are concerned, you are not alone. According to TransUnion statistics, 54% of online shoppers are worried about becoming victims of online fraud, representing a 17% increase from last year. If you are not already taking precautions, now is the time to start.  

In this article, we will explore how cybercriminals exploit the holiday season while also providing you with practical tips to protect your data, finances, and privacy. Therefore, allowing you to fully enjoy holidays and all the associated sale events as you shop for the perfect gift for your loved ones. 

Unmasking the Tactics: Understanding How Cybercriminals Exploit Your Vulnerabilities 

(1) Phishing Emails 

1) During this season, it is common to receive emails that appear to be from reputable retailers, charities, or delivery services. These emails frequently promote fraudulent deals, request urgent payments, or claim there is a problem with delivery. They may ask you to download attachments or click on links that lead to malicious websites, resulting in malware on your device or stolen personal information.  

(2) Fake Websites and Online Stores 

1) Scammers create fraudulent websites that resemble legitimate retailers. These websites advertise unrealistic discounts in order to entice victims to make purchases. Once the payment information is entered, the scammers either steal it and/or fail to deliver the products.

(3) Malicious Ads (Malvertising) 

1) Malvertising is the practice of creating fake online advertisements in order to distribute malware. These advertisements frequently appear on social media or search engines, enticing users to click on them or redirecting them to fraudulent websites. This method allows malware to be downloaded onto the victim's device, potentially giving hackers access to sensitive data. 

(4) Social Media Scams 

1) During this time of year, scammers make extensive use of social media. Scammers use these platforms to promote fake giveaways, holiday contests, and exclusive sales. Victims are frequently prompted to provide personal information or payment information in order to "claim their prize" or access the "deal," which ultimately leads to data theft.  

(5) Fake Charity Appeals 

1) The last quarter of the year is the best time to raise donations, making it an ideal time for cybercriminals to take advantage of the giving spirit by creating fake charity campaigns. These frequently take the form of emails, social media posts, or crowdfunding links requesting donations. Victims unknowingly contribute to fraudulent causes, resulting in financial loss and, in some cases, the exposure of personal information. 

(6) Delivery Scams 

1) With the increase in online purchases during the holiday season, scammers send out fake delivery notifications claiming there is a problem with a package. These messages encourage recipients to click on a link or provide additional information, resulting in phishing or malware attacks. 

(7) Public Wi-Fi Exploits 

1) Cybercriminals can create fake Wi-Fi hotspots and intercept data on unsecured networks, gaining access to personal information such as login credentials and payment details. They can use this information for identity theft, unauthorized transactions, or data selling on the dark web. 

Cybersecurity Strategies to Ensure a Stress-Free and Joyous Holiday Season 

(1) Beware of Phishing Scams. 

1) Be cautious with links and attachments found in emails, websites, social media posts, and advertisements. Through these malicious links, users are often tricked into providing personal details. Always verify the sender’s email address and look for signs of fake websites, such as misspelled domain names. 

2) Stay alert for "too good to be true" offers. If a deal seems too good to be true, it probably is. Check the legitimacy of unfamiliar brands and influencers on social media. 

3) If you receive a delivery notification, always visit the official delivery company website and manually enter the tracking number. Avoid clicking on tracking number links, as they may lead to phishing websites that steal your personal information. 

(2) Secure Your Online Shopping Accounts 

1) Make sure you enable Two-Factor Authentication (2FA) on your accounts. It is also recommended that you use strong, unique passwords for each shopping site to protect your personal information. 

2) Always make your purchases from companies that you trust and are familiar with. If you are unfamiliar with a company, read online reviews and verify its legitimacy and reputation on websites like the Better Business Bureau. 

3) Ensure that the website has HTTPS (not just HTTP) in the address bar, indicating that it is secured with encryption. This added layer of security ensures that your transactions and sensitive data remain private while you shop online. 

 (3) Payment Methods 

1) Using credit cards versus bank transfers is highly recommended for better fraud protection, as they allow you to easily dispute charges if goods or services are not delivered as promised. 

2) Do not pay with cryptocurrencies, as this can be a sign of a scam. This payment method provides a level of anonymity, and scammers frequently use it because transactions are difficult to track and irreversible. If a business insists on payment in cryptocurrency, proceed with caution, as this method is frequently associated with fraudulent activities.  

3) Do not pay with gift cards. Genuine businesses and organizations will never request payment via gift cards. Always be cautious if any business requests this type of payment. 

(4) Public Wi-Fi Safety 

1) Avoid making transactions on public Wi-Fi, since they are often unsecured, making it easier for cybercriminals to intercept your data. Only use secure Wi-Fi networks that you know and trust. 

2) If you must use public Wi-Fi, ensure that you have a VPN installed on your device. A VPN encrypts your internet connection, protecting your data from cybercriminals and securing your personal information. 

(5) Fake Charity Donations 

1) Before making any donation to a charity, ensure that the organization is a verifiable charity. Conduct some online research before making any transaction using social media, and consider using services like Better Business Bureau's Wise Giving Alliance,  Charity Watch and/or Charity Navigator. 

(6) Keep Software and Devices Updated 

1) It is strongly recommended that you install the latest updates to your operating system, apps, and antivirus software. Therefore, allowing you to reduce your chances of falling victim to malware or cyberattacks. 

Stay Information and Stay Jolly  

The risk of cybercrime increases as the holiday season approaches, with cybercriminals seeking to exploit the surge in online shopping. Given the various tactics they use to target online shoppers, it is important to remain vigilant. By following the key precautions outlined in this article, you can significantly reduce your chances of falling victim to fraud. Stay informed and cautious, and enjoy the holiday season with peace of mind, knowing that your data and finances are better protected. 

Author: The Safeguards Consulting, Inc. Cybersecurity Team