Security Awareness

University of Massachusetts > Security Awareness > Security Awareness 12 Basic Rules

12 Basic "Rules" to Protect You and Your Computer  

1. Never leave your computer logged on unattended, even for a minute. Remember, you are responsible for any activity performed using your user id.    

2. Always log off when you are done or are leaving your work area for an extended period of time.  

3. Create an "uncrackable/unguessable" password. A non-word with one or more numbers inserted in the middle (not on the ends) is the best choice.  To make a memorable and secure password use the letters from a phrase/song, add digits, and use upper and lower case letter (I Love Paris In The Spring - ILp1TS4 - inserted number one for the I).   

4. Do not give your password to anyone for any reason or type your password when someone is watching. Don't write down your password, include it in automated scripts, store it on your hard drive/PDA, and don't ask the system to remember your id and password.  Employees should never log on with their user id/password and let someone else use their access.  

5. Never send confidential or personal information (e.g., password, credit card or account information, social security number, driver's license number, etc.) through the network. E-mail, chat, instant messaging, Internet Relay Chat (IRC - Internet version of CB radio that lets people all over the world have real time conversations) and talk are all equally unsafe.  

6. To protect your computer against viruses and other security exploits install and routinely run anti-virus software.  Update your anti-virus software regularly to ensure new virus signatures will be detected.  

7. Update your operating system on a regular basis with the latest security patches, updates and drivers. This will ensure that your computer is up-to-date and will help prevent against viruses and other security breaches.  

8. Never make or use illegal duplicates/copies of software, manuals, images, music, video, etc.  

9. Dispose of personal or confidential information in a secure manner (e.g., shred, wipe, incinerate).  

10. Make sure your data and applications are properly backed up.  Store backups in a location away form the original source of the data (e.g., hard drive).   

11. Make sure you protect your computer with surge protectors, by not eating or drinking near it, and by keeping your work area clean.   

12. Maintain the confidentiality of all data, keeping in mind the privacy of all individuals.