The document provides tips for safe computing including regularly patching operating systems and software, using protective antivirus software, keeping passwords secure, backing up important data, and encrypting hard drives. It recommends installing updates, using firewalls, controlling physical access to devices, using email and the internet safely, and protecting sensitive data. Whole disk encryption is available for UVic computers through BitLocker to help prevent unauthorized access to files if a device is lost or stolen.
The document provides tips for safe computing including regularly patching operating systems and software, using protective antivirus software, keeping passwords secure, backing up important data, and encrypting hard drives. It recommends installing updates, using firewalls, controlling physical access to devices, using email and the internet safely, and protecting sensitive data. Whole disk encryption is available for UVic computers through BitLocker to help prevent unauthorized access to files if a device is lost or stolen.
1. Patch, patch, PATCH! Most desktop security incidents centre around flaws in the operating system. As these flaws are discovered, vendors release patches to cover these security holes. By updating your operating system regularly, you ensure it has all the latest patches. Both Windows and Mac operating systems have automatic update features. 2. Install protective software Protective software, such as anti-virus and anti-spyware software, will help protect your computer and data from online security threats such as viruses, Trojans, rootkits, and spyware. Purchase protective software from a well-known, reputable vendor to ensure the best protection. All computers purchased through the TSC come with Symantec Endpoint Protection. The Computer Store also sells Symantec for staff and students. 3. Keep your software up-to-date Like your operating system, some software packages offer regular security updates. These should be installed promptly after they are released, as failure to do so will leave your computer vulnerable to security threats. Microsoft Office, Adobe Acrobat, Adobe Flash, and Java are common programs that should be updated regularly. 4. Use desktop firewalls Windows and Mac computers have basic desktop firewalls as part of their operating systems. When set up properly, these firewalls will help prevent unauthorized access to your computer over the network. Network-based firewalls provide an additional layer of security. 5. Manage your passwords Choosing passwords that are difficult to guess and easy to remember will help keep your important files and accounts secure. Choose a password with a combination of upper- and lower-case letters, numbers, and symbols. Do not use words found in any dictionary. Create a different password for each account, and change passwords regularly. Never give your password to anyone, for any reason, no matter what.
6. Backup, backup, BACKUP!
Whole Disk Encryption
Make regular copies of important data and
store them securely in a geographically separate location. This will help prevent data loss if your computer is attacked by a virus or Trojan, or if your computer's hard disk fails. Enterprise backup services (TSM) are available for faculty and staff.
In order to help mitigate risks to information
associated with physical loss or theft, your TSC computer hard drive can be encrypted to prevent unauthorized access to information. Whole Disk Encryption prevents an unauthorized third party from accessing the contents of your computer. No one will be able to access your computer data without your passphrase.
7. Control physical access to your computer
Don't leave your computer, tablet, cell phone, or storage media in an unsecured area, or unattended and logged on, especially in public. Use a cable lock to physically secure your laptop, even if your laptop is in your office. Ensure that your device is set to lock after a period of inactivity and prompt for a username/password to unlock. Setup a login password for your tablet or smartphone. 8. Use email and the Internet safely Ignore unsolicited emails, and be wary of attachments, links and forms in emails, instant messaging services, and social networking sites that come from people you don't know or that seem "phishy." Avoid untrustworthy (often free) downloads from freeware or shareware sites. For more information, see www.uvic.ca/phishing. 9. Use secure connections When connected to the Internet, your data can be vulnerable while in transit. Look at secure remote connectivity and file transfer options, such as VPN services, when off campus. When using your browser to transmit sensitive information, ensure the URL address starts with https:// and look for the lock icon in your browser indicating a secure page. 10. Protect sensitive data At the very least, your computer contains sensitive data about you (the user) and likely stored passwords in key chains and in web browsers. Depending on your job, you may also have access to the sensitive data of others. Store restricted data on university servers. Saving data to your local hard drive, printing it, or transferring it to a laptop or USB key risks the security of that data. Using Whole Disk Encryption can help mitigate the risk of unauthorized access to these files in the event that your device is lost or stolen.
BitLocker Whole Disk Encryption is centrally
supported by University Systems and provides benefits such as encrypting an entire hard disk, central management, policy enforcement, encryption key management, and recovery. This software comes installed on all standard TSC computers. For more information, see www.uvic.ca/tsc.
Helpful security websites
UVic - Secure your data: www.uvic.ca/secureyourdata UVic - Information Security Oce: www.uvic.ca/systems/about/ informationsecurity/ National Cyber Security Alliance - Staying safe online: www.staysafeonline.org Oce of the Privacy Commissioner of Canada: www.privcom.gc.ca Microsoft Safety & Security Center: www.microsoft.com/security RCMP Internet Safety: www.rcmp.gc.ca/is-si/
Questions? Contact the Computer Help Desk: Email: Web: Phone: In person:
[email protected] www.uvic.ca/systems 250-721-7687 Clearihue A004 and McPherson Library
Lisa Cason v. Edward C. Rolfs, in His Official Capacity as Secretary of Revenue of the State of Kansas, Mark Andrews, Director, Personnel Services Bureau, Department of Revenue, State of Kansas, John E. Gillen, State of Kansas, 930 F.2d 32, 10th Cir. (1991)