IT security advice for your everyday life
Here we have collected some items (tips and tricks) that can be good for you to think about in your everyday life. There are also things to keep in mind when traveling.
General advice and incidents
- Join us in contributing to a safe digital life – if you discover shortcomings, tell your boss.
- Think about where you are when talking or working with sensitive information
- Do you notice that something is malfunctioning or behaving strangely in an IT system? Get in touch with IT support directly.
Account and login details
- Hold tight to your credentials – never share them with anyone. You are responsible for what is done in your name.
- Use different passwords privately and at university. If a private account is hacked, we don't want anyone to have access to our systems.
Connectivity and Networking
- Be careful with unknown Wi-Fi networks – you never know who is listening. Prefer to use Eduroam.
- When you connect from the outside: Always use the university's VPN. Then the communication will be encrypted and secure.
- Do not send sensitive information in regular email – this is similar to sending a postcard. If needed, use encryption (the guide is here).
Be vigilant: phishing, fake emails and shady links pop up all the time. Think once more before clicking – both in emails and on the web.
Equipment
- Keep track of your computer and mobile devices – always lock when you leave them for a while.
- PC: Windows + L (as in Locked)
- Mac: Ctrl + Cmd + Q
- Do not leave equipment unattended in public places.
- Never plug in unknown USB flash drives or charging sockets – they may contain viruses.
- Save information in the right place, depending on how sensitive it is.
- Always update your computer and mobile device as fast as you can – security fixes protect against new threats.
- Make sure your devices have basic protection: automatic locking, password/PIN and antivirus.
- Do not work with university information on private equipment.
- When you no longer need a storage media: Clear it safely.
Travel
- Are you travelling on a work computer or mobile phone? Check the Security Council before, during and after your trip.
-
Before the trip
- If you travel abroad and have a Smartphone, download the app "UD Resklar" and take part of information available about the country you are visiting. Alternatively, take part in information about the country on the Ministry of Foreign Affairs' website. Follow the Foreign Ministry's recommendations.
- Information that is stored at home in a storage solution with high security can be exposed to great risks if you copy it over to a mobile device that you take with you on the trip. Only bring the information you need on the trip
- Using your devices outside of the regular office environment increases the risk of losing them or being exposed to some form of attack. Bring only the devices you really need
- Make sure you have access to the university's VPN service. If you do not already have it - see instructions on the employee pages that show how to access the service
- Update the software on your devices
- Make sure your devices are equipped / configured with standard security protection (automatic locking, password / PIN code, updated antivirus software, etc.)
- Update yourself on current information about the country that is the subject of your trip. Are there special rules regarding carrying encrypted information? Are there other rules / restrictions? Check with the travel agency and others who have visited the country in question.
-
During the trip
- Keep an eye on your devices
- If you use your laptop in public environments - beware of visual hacking. Use privacy filters on your screen!
- Avoid connecting your devices to public WiFi networks. You share these networks with strangers, some with dubious purposes. Some networks are set up specifically to steal information and spread malicious code
- Connecting to password-protected networks, for example in hotels, can also involve major risks. Be critical of questions asked in connection with connection to the network. If there is access to Eduroam, it is a good alternative. The university's VPN services provide encrypted communication to your resources at the university.
- Disable services that you do not need during the trip (for example, location services and bluetooth).
- If free USB sticks are distributed at the fair or elsewhere, do not use them.
- Use your own charger and cable (do not use USB sockets). In some hotels, chargers and cables may be placed in the rooms, sometimes rigged to plant malicious code in the connected devices.
-
After the trip
- Run a virus check on the devices you had with you on the trip
- If you had USB sticks with you that were used during the trip, these should also be checked.
- Pay special attention to any phishing attempts that may be related to your stay abroad