A CYBER HYGIENE TRAINING SESSION WAS HELD AT THE REPUBLICAN CENTER FOR THE STUDY OF PUBLIC OPINION “IJTIMOIY FIKR”AS PART OF ISO/IEC 27001 IMPLEMENTATION

On August 14, 2026, a specialized practical training session aimed at improving employees’ digital literacy and developing cyber hygiene skills was held at the Republican Center for the Study of Public Opinion “Ijtimoiy Fikr.”

The event was organized by the Information Technology and Information Security Department under the supervision of A.A. Nabiyev. The speakers were Nurmuhammad Abduganiyev, an expert from the Information Security Department, and Muhammadali Ergashev, a representative of the Data Laboratory.

Improving employees’ digital literacy and developing their ability to identify cyber threats in a timely manner are being carried out within the framework of the project to implement the international information security standard ISO/IEC 27001.

The establishment of an effective Information Security Management System (ISMS) at the Center involves not only the introduction of modern technical protection measures, but also the reduction of risks associated with the human factor. In this regard, systematically raising employees’ awareness is one of the key conditions for ensuring the continuity of work processes and protecting confidential information.

During the training, the following areas of particular importance for the effective functioning of the Information Security Management System were addressed:

1. Identification and authentication — rules for creating and using strong passwords, as well as the basic principles of secure access to information systems.
2. Social engineering and phishing — methods of psychological manipulation, ways to recognize phishing messages, and safe response procedures when receiving suspicious emails, links, and attachments.
3. Secure information handling — rules for processing, storing, and transmitting confidential data, as well as methods for protecting information from unauthorized access on work devices.
4. Incident response — procedures to be followed by employees when malware or suspicious activity is detected in the information system, as well as the use of established emergency communication channels with the Information Technology and Information Security Department.

As part of the practical session, participants reviewed typical cyber threat scenarios that may arise in everyday work and received recommendations on the safe use of digital resources, corporate systems, and email.

The Center’s management noted that such training sessions will become a regular practice and will contribute to the consistent improvement of the organization’s cyber resilience.

Regular training will help strengthen the Center’s digital culture and foster a responsible attitude toward information security among employees, transforming each staff member from a potential source of risk into an important element of the organization’s integrated information protection system.