Welcome to Cyber Angel Security (CAS)

Our informative approach is designed to ensure you can read, understand, and apply security concepts as effectively as possible.

The term Digital Citizenship is a neologism, a relatively new concept that has emerged alongside the technologies and interactions of our modern digital world. To understand how this concept functions in practice, we draw upon its core foundations.

These are the six foundational cybersecurity functions:

• Govern – Establishing rules, responsibilities, and informed decision-making practices that guide safe digital behavior.

• Identify – Recognizing assets, risks, vulnerabilities, and potential threats within the digital environment.

• Protect – Implementing safeguards and good practices to reduce risk and secure information.

• Detect – Identifying unusual activity, potential security events, or indicators of compromise.

• Respond – Taking appropriate action to contain, manage, and address security incidents.

• Recover – Restoring normal operations, learning from the experience, and strengthening future resilience.

From Functions to Practice

The following section provides a structured synthesis of the six core functions of the NIST Cybersecurity Framework. These functions have been consolidated into three practical, human-centered pillars, designed to translate established cybersecurity standards into actionable guidance for everyday digital life.

1. Identify and Protect: Responsible and Safe Use

This pillar focuses on understanding how common risks operate, including scams, malware, identity theft, and phishing. By recognizing how these threats are structured and delivered, you strengthen your ability to identify them early. It also involves applying appropriate safeguards, such as strong passwords, privacy settings, and trusted security tools, to reduce exposure and maintain control.

Real-Life Application

Michael decides to create an account to purchase a product from a website he has never used before. Before entering any personal information, he takes a few moments to learn more about the company. He reviews customer feedback and confirms that the website appears legitimate.

As an additional precaution, he copies the website address and submits it to VirusTotal URL Scanner, a free online security service that analyzes web addresses using multiple security engines and threat intelligence sources to identify known malicious or suspicious websites. This extra verification helps him make a more informed decision before interacting with the site.

After completing these checks, Michael feels more confident that he is visiting the intended website and proceeds with greater awareness and caution.

A few days later, Michael receives an email claiming there is a problem with his account and urging him to act immediately. Instead of reacting to the message, he notices that the sender’s address looks unusual and that the message is creating unnecessary urgency. Rather than clicking any links, Michael calls the company’s phone number printed on his purchase receipt. He also decides to double check the message on the email and checks the account he created during his purchase through the company’s official customer portal. He confirms that there is no issue with his account.

The Result:

By identifying potential risks and applying appropriate protective measures, Michael demonstrates how the Identify and Protect functions can work together in everyday digital situations. His ability to recognize suspicious indicators, verify information through trusted sources, and avoid unnecessary exposure of personal data helps reduce vulnerabilities and protect his digital accounts and personal information.

2. Detect and Respond: Situational Awareness and Informed Action

This pillar highlights the importance of recognizing unusual activity, evaluating information, and taking appropriate action when potential threats are identified. It supports the ability to distinguish between legitimate and misleading content, enabling individuals to pause, verify, report suspicious activity, and respond responsibly when necessary. By combining awareness with informed action, individuals can reduce risk and maintain greater control in uncertain situations.

Real-Life Application

David receives a message from what appears to be a legitimate agency requesting that he complete a profile update to continue accessing a service. The message includes his correct name and other details that appear accurate, making the request seem trustworthy. It also provides a link directing him to a website that closely resembles the organization’s official platform.

Instead of immediately entering his personal information, David pauses and evaluates the situation. He considers whether the request is expected, whether the communication arrived through a trusted channel, and whether the website address truly belongs to the legitimate organization.

Rather than using the provided link, David independently accesses the official website through his browser and contacts the organization using verified contact information. He discovers that the request was not legitimate and that the website was a deceptive imitation designed to collect personal information.

The Result:

By recognizing that familiar details and professional-looking communications do not always guarantee authenticity, David demonstrates how the Detect and Respond functions can work together in everyday digital situations. His ability to identify suspicious indicators, verify information through trusted channels, and take appropriate action before sharing personal information allows him to distinguish between a legitimate interaction and a deceptive attempt. By responding responsibly to a potential threat, David helps reduce risk, limit exposure to fraud, and maintain control over his personal information.

3. Recover and Evolve: Responsible and Ethical Participation