|Message Sent To:||All Faculty, All Staff|
|Message From:||Message from Information Technology Services|
|Date Sent:||Tuesday, March 31, 2020 09:45 AM CDT|
Remote Work Cybersecurity Recommendations
Dear Faculty and Staff,
As we get settled into our home offices, we must practice heightened awareness in protecting our digital identity, as well as the information entrusted to us by our students and fellow faculty and staff.
When it comes to equipment use at home, we often forget some of the common security practices we don’t have to worry about when working inside the protected network of the University. A simple check of your home office equipment goes a long way toward protecting our information.
Keep Your Computer Updated
Vendor-provided updates, sometimes referred to as a “patch,” help prevent hackers from gaining access to your computer. Delaying a patch installation increases your vulnerability. The easiest way to keep your computer up to date is to turn on “auto update” functionality.
Run Current Antivirus Software
Running the latest antivirus software prevents viruses, malware, and ransomware from infecting your computer or, even worse, encrypting all your data. Internet service providers often offer free antivirus software to their subscribers, or you can check the ITS antivirus resources for additional options.
Choose a Secure Wi-Fi Password
While a simple password may be easier to use, it poses a security risk for your wireless network. Unauthorized individuals attempt to tap into home networks more than you realize. Review your Wi-Fi password, even it is the default for your router. A secure password should contain uppercase, lowercase, special characters, and numbers.
Separate Work from Home
When possible, maintain separation between work and personal environments on your home computer. For example, if other family members use your computer, monitor what they install and download. Games and other applications often include spyware or adware that not only slows down your computer but provides another entry point for malware to be installed undetected. If you share a computer with other family members, close all work-related browsers and applications to avoid inadvertently showing private University information or giving access to your email account. Disconnect from LSA after every session.
Keep University Data Safe
Keep sensitive documents and files confidential by using secure connections to our online resources. University data should never be saved on the local drive of your home computer. Although convenient for working offline, it could create a data breach that puts personal information at risk should your computer be hacked or stolen. Use Remote Desktop or OneDrive to store University information. OneDrive should only be used for sensitive or protected information if you are enrolled in multi-factor authentication or MFA. MFA protects your account if your password becomes compromised as a result of a phishing attack. For more information or to sign up for MFA, visit the ITS website.
Beware of COVID-19 Phishing Emails and Sites
With the COVID-19 outbreak, be more vigilant about recognizing phishing emails taking advantage of the situation. A common scamming email provides a link to a fake COVID-19 map. When the user clicks on the link, malware ransomware is automatically installed. It sometimes asks for an ID and password that could be used to hijack an account. When you’re in the office, the University utilizes our security technology tools to prevent access to these types of links. However, we cannot offer that same protection when you’re working at home and not using Loyola Secured Access (LSA) system. If you click on a scam email link without using LSA, you are unprotected. Please be careful when opening and reading emails, especially those related to COVID-19.
Additional useful information on teaching and working remotely are available at LUC.edu/its/keepitworking. If you need assistance with anything, please contact the ITS Service Desk using one of the following options:
Self-Service: Self-Service Portal
Phone: 773-508-4ITS (773-508-4487)
Susan Malisch, Vice President, Chief Information Officer
Jim Pardonek, MS, CISSP, CEH, GSNA, Associate Director, Chief Information Security Officer