Keep your Data out of Hackers’ Reach!

Below are simple practices to keep your information and data out of hackers’ reach.

1. Safeguard your computers

• Secure your computers with anti-virus software.
• Keep virus signatures, spyware signatures, Windows and other software patches updated.
• Enable personal firewall.
• For more information about the suggestions above, read “Guidelines for Securely Configuring your Computers“

2. Securely protect your smartphones and tablets

• Lock your smartphones and tablets by enabling passcode and automatic screen lock after a short period of inactivity.
• Avoid storing confidential / sensitive data on your smartphones and tablets.
• Securely erase / wipe all the data in your device before discarding or selling your device.
• For more security tips on smartphones and tablets, read the “DO and DON’T Security Tips while Using Smartphone and Tablets“

3. Set strong passwords

• Enable password protection for all your computing devices, smartphones and files (e.g. Excel and PDF files) containing confidential information. Read “Guidelines to Safeguard Your Password” for tips of strong password.

4. Avoid sensitive data transmission

• Do not post or transmit any files containing sensitive data over the Internet. If you have to, send them in encrypted mode. Read the suggestions from “Stay Alert and Use Encryption to Protect Confidential Data” for details.

5. Use encryption when processing sensitive data

• Use Microsoft Information Protection (MIP) for encrypting documents and sending protective email. For instruction, please read “Stay Alert and Use Encryption to Protect Confidential Data” for details.
• Establish a VPN connection when using Wi-Fi service.
• Check if SSL (https://) instead of (http://) is used when browsing any website processing sensitive data.
• Encrypt files containing sensitive data with encryption software (such as Microsoft Information Protection (MIP)) and strong password.

6. Be alert to email attachment

• Email is a common way to spread malware. Before you open an attachment in email, check the email address to ensure the sender is from someone you know. If it looks suspicious, report it to ITSC.

7. Never disclose your password

• The University never asks you to confirm or validate your email account, password or personal information by replying to an email or by clicking a hyperlink in the email. If you suspect your OnePass password is compromised or computing device is hacked, you should change your password immediately and report it to ITSC. For details, please check “Phishing Email/Web Fraud Alert” for instruction.

8. Pay attention to the use of Public Cloud Storage Services

• The University has contractual agreements with Microsoft for cloud storage (OneDrive and SharePoint) for our members to store and share University data. Only data with no sensitive/confidential information may be stored on other public cloud storage. Check out “Best Practices on Using Cloud Storage Services” for tips on using public cloud storage.