In order to ensure information security, employees were instructed on the importance of using social media safely, creating strong and unique passwords for social media accounts, not sharing personal passwords with third parties or sending them through messengers, and not opening suspicious links or files received from unknown users.

Employees were also once again provided with detailed explanations regarding the importance of not publishing personal or confidential work-related information on social media, regularly checking the privacy settings of their profiles, monitoring account login history and active sessions, using only official mobile applications and trusted sources, and using bank cards securely.

In particular:

• Never disclose the bank card number, expiration date, CVV/CVC code, or SMS verification codes to anyone;
• Enable SMS or Push notifications in the bank’s mobile application;
• Make online payments only through trusted and secure (HTTPS) websites;
• Keep the phone number linked to the bank card under control;
• Use separate virtual cards for online payments;
• Set transaction limits and restrictions for bank cards;
• If suspicious transactions are detected, immediately contact the bank and temporarily block the card;
• Do not provide bank card information or verification codes to individuals claiming to be bank employees;
• Take appropriate measures to protect against phishing attacks due to the increasing number of phishing incidents, which are a type of cybercrime aimed at fraudulently obtaining users’ login credentials, passwords, bank card information, and other confidential data;
• Do not open suspicious links received via email, SMS, or messaging applications;
• Enter login credentials, passwords, and banking information only on official websites;
• Check the sender’s email address;
• Do not download unknown files or programs;
• Verify suspicious messages claiming to be from an organization or bank through official communication channels;
• If a phishing attack is suspected or detected, immediately report it to the Information Security Department or the relevant responsible person.

Protection of Mobile Phones

To protect mobile phones from cyberattacks originating from the external Internet and to ensure their security, the following requirements must be observed:

• Protect the phone with a PIN code, strong password, or biometric authentication such as fingerprint or facial recognition;
• Regularly update the operating system and all installed applications;
• Download and install applications only from official application stores such as Google Play and the App Store;
• Do not download APK files from unknown sources;
• Use mobile antivirus or other security software;
• Enable Bluetooth, NFC, and Wi-Fi only when necessary;
• Exercise caution when using open and unsecured Wi-Fi networks in public places and on public transport, and use a VPN service when necessary;
• If the phone is lost or stolen, immediately take measures to block the SIM card and remotely disable or erase the device.

Each employee working in institutions under the Main Medical Directorate under the Administration of the President of the Republic of Uzbekistan has been assigned the responsibility to strictly comply with the above recommendations and requirements for protection against cyber threats associated with social media, bank cards, mobile devices, and the Internet.

It must always be kept in mind that compliance with information security requirements is an important factor in ensuring reliable protection of users’ personal data, financial assets, and the organization’s information resources.

In accordance with Article 14 of the Law of the Republic of Uzbekistan “On Cybersecurity”, state bodies and organizations are required to ensure the cybersecurity of information systems and information resources under their control, as well as to take measures to ensure the stable operation of information and communication networks.