IT Handbook - Directories - University of Cincinnati

Security Basics and Virus Information
www.uc.edu/nfosec
http://www.uc.edu/infosec/, 513-558-ISEC (4732)
Information Security
UCIT’s Office of Information Security offers a wide variety of services. These include:
• Links to FREE anti-virus/anti-spyware software.
• Education and awareness training
• Tips and How-To pages on fighting spam & identity theft, protecting your laptop and more!
• These offerings and many more can be found at http://www.uc.edu/infosec.
• If you suspect that you have been a victim of a computer crime or abuse while at UC, please report
the incident to abuse@uc.edu. Give as much detail as possible: Who, What, When and Where.
The NEVERS of password security
Never disclose your password to others, either in
person, by phone, or by e-mail. UC staff will never
ask you for your password via e-mail or telephone.
If you must write down your password, keep it in a
locked location.
Never leave your password at the default. Change
it immediately.
Never make your password less that eight
characters if possible.
Never use all numbers or all letters. Use a
combination of upper and lower case letters,
numbers, and special characters like @! & * [ ].
Never use personal information that someone
could easily guess or discover: your pet,
hometown, sports team or really any word found
in a dictionary. Make your password from a phrase
(i.e., use the first letter of every word from a
simple quote).
The NEVERS of computer security
Never leave your desktop computer unlocked
when you walk away, and turn it off at the end of
the day.
Never download or install a screensaver; use what
is preinstalled.
Never install software received from another user.
Never download copyrighted materials such as
music or movies illegally.
Never leave your laptop unattended, even in the
cab of your car. Protect it like your purse or wallet.
Put location finding software (such as lo-jac) on
your laptop.
Never check your laptop while flying.
Never leave sensitive information vulnerable.
Password protect or encrypt any sensitive
information on laptop. Use security cables.
Never keep the same pasword for longer than 90
days.
Password Security
• Never disclose your password to others, either in person, by phone, or by e-mail.
• Never leave your password at the default. Change it immediately.
• Make your password eight or more characters where possible.
• Do not reuse passwords. That way if your password is compromised at one site it won’t allow anyone
access to all sites
• Make your password from a phrase (i.e., use the first letter of every word from a simple quote).
• Use a combination of upper and lower case letters, numbers, and special characters like @ ! & * [ ].
• Never use all numbers or all letters.
• Never use personal information that someone could easily guess or discover: your pet or hometown, etc.
• Never use any word found in a dictionary or the name of a sports team.
• If you must write down your password, keep it in a locked location.
• Change your password frequently, at least every 90 days.
• UC staff will never ask for your password via e-mail or telephone.
• See http://www.uc.edu/infosec/password/choosepassword.html for more ideas!
76