IT security advice for your everyday life
Here we have collected some items (tips and tricks) that can be good for you to think about in your everyday life. There are also things to keep in mind when traveling.
General advice and incidents
- You as an employee should actively work for increased safety, and point out shortcomings you see to your manager. Read more in the Information Security Policy.
- Consider what environment you are in when handling and talking about sensitive information.
- Pay special attention to, and report abnormal functionality and events in IT systems to IT Support.
Account and login details
- Protect your login details and never give them out. You are personally responsible for the activities carried out through your login details.
- Never use the same password at Mid Sweden University as you do privately. We cannot review the security of services used privately and lack of security in such services may lead to unauthorised access to passwords used to Mid Sweden University’s systems.
Connectivity and Networking
- Be restrictive with unknown wireless networks, these are shared with unknown ones that may have the goal of stealing your data and spreading malware. If you have access to Eduroam, this is a good option.
- Always use the university VPN service when connecting externally. It gives you encrypted communication to your resources at the university.
- Avoid sending sensitive information via email, sending email can be equated to sending a postcard. If the information is required to be sent by e-mail, it must be encrypted. Here are guides that show you how to encrypt email.
- Have increased vigilance regarding phishing, malware, password management, fake documents and websites. Think before you click! This applies to both links and attachments and links in your email, but also when browsing the internet.
Equipment
- Keep an eye on your mobile phone and computer. Lock them if you leave them temporarily. To lock your computer, press the Windows button and the letter L (as Locked). Do not leave them unattended in public places. To lock the Mac, press Control, Command, and the letter Q.
- Never leave your equipment unattended in public places.
- Never plug in an unknown USB or other unknown external device. These may be infected with viruses that spread automatically when connected. This also applies to USB sockets for charging.
- Ensure that your information is stored on the intended storage area depending on the sensitivity of the information. Install security updates on your phone, computer and other devices as soon as possible. New updates often include security updates that reduce your risk of being exposed to different types of threats.
- Make sure your devices are equipped/configured with standard security protection (automatic locking, password/PIN code, updated antivirus software, etc.).
- Do not use private equipment for work-related tasks.
- When you are going to stop using a removable storage media, remember that it needs to be cleaned safely.
Travel
- If you're going to travel, and bring a mobile device, there are a number of things you should consider before, during and after the trip, see the list below.
-
Before the trip
- If you travel abroad and have a Smartphone, download the app "UD Resklar" and take part of information available about the country you are visiting. Alternatively, take part in information about the country on the Ministry of Foreign Affairs' website. Follow the Foreign Ministry's recommendations.
- Information that is stored at home in a storage solution with high security can be exposed to great risks if you copy it over to a mobile device that you take with you on the trip. Only bring the information you need on the trip
- Using your devices outside of the regular office environment increases the risk of losing them or being exposed to some form of attack. Bring only the devices you really need
- Make sure you have access to the university's VPN service. If you do not already have it - see instructions on the employee pages that show how to access the service
- Update the software on your devices
- Make sure your devices are equipped / configured with standard security protection (automatic locking, password / PIN code, updated antivirus software, etc.)
- Update yourself on current information about the country that is the subject of your trip. Are there special rules regarding carrying encrypted information? Are there other rules / restrictions? Check with the travel agency and others who have visited the country in question.
-
During the trip
- Keep an eye on your devices
- If you use your laptop in public environments - beware of visual hacking. Use privacy filters on your screen!
- Avoid connecting your devices to public WiFi networks. You share these networks with strangers, some with dubious purposes. Some networks are set up specifically to steal information and spread malicious code
- Connecting to password-protected networks, for example in hotels, can also involve major risks. Be critical of questions asked in connection with connection to the network. If there is access to Eduroam, it is a good alternative. The university's VPN services provide encrypted communication to your resources at the university.
- Disable services that you do not need during the trip (for example, location services and bluetooth).
- If free USB sticks are distributed at the fair or elsewhere, do not use them.
- Use your own charger and cable (do not use USB sockets). In some hotels, chargers and cables may be placed in the rooms, sometimes rigged to plant malicious code in the connected devices.
-
After the trip
- Run a virus check on the devices you had with you on the trip
- If you had USB sticks with you that were used during the trip, these should also be checked.
- Pay special attention to any phishing attempts that may be related to your stay abroad