{"id":101543,"date":"2016-09-23T14:59:38","date_gmt":"2016-09-23T18:59:38","guid":{"rendered":"http:\/\/www.bu.edu\/tech\/?page_id=101543"},"modified":"2021-04-26T13:26:28","modified_gmt":"2021-04-26T17:26:28","slug":"securing-your-devices","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/support\/information-security\/securing-your-devices\/","title":{"rendered":"Securing Your Devices"},"content":{"rendered":"

It’s important these days to make sure our devices are secure – thank you for taking the time to learn more about that!<\/p>\n

Boston University has policies–the\u00a0Minimum Security Standards<\/a>\u00a0that provide the security requirements for devices being used to access sensitive information. \u00a0This page is a supplemental guide that we hope will help make it easier to secure all of your devices. \u00a0BMC Security policies can be accessed on any BMC computer or on BMC wireless by visiting Section 40 on the Policy & Procedure website<\/a>.<\/p>\n

In general, the easiest and most important thing you can do to secure each of your devices is to set a password<\/strong>. If you do not already have a password on your device, put one on right now. Many of the security features that come with your device are not activated until a password is set. \u00a0Here\u00a0are a few tips on how to come up with a strong password<\/a> that is easy to remember. \u00a0Also, never share your password with anyone.<\/i><\/b>\u00a0 Every person needs to have their own account and their own password.\u00a0 If something occurs and your password was used, you<\/i> are responsible.\u00a0 Don\u2019t share your password with your students or research assistants; don\u2019t post your password on a piece of paper next to the computer.<\/p>\n

What are you securing?<\/h3>\n

Smartphones and Tablets<\/h4>
<\/p>\n

Here are the top things you can do to secure your phone and tablet:<\/p>\n

    \n
  1. Set a passcode<\/strong>. Follow best practices<\/a> and set auto logoff\/screen lock to no more than 15 minutes. This is the easiest way to prevent an unwanted visitor from accessing all of those pictures, messages, apps and notes that you hold so dearly. \u00a0For many modern smart phones and tablets, simply setting a password, automatically encrypts much of the most sensitive contents.
    \n[Instructions for:\u00a0    iPhone and iPad<\/a>,\u00a0Android<\/a>,\u00a0Windows<\/a>,\u00a0BlackBerry<\/a>,\u00a0Microsoft Surface RT<\/a>]<\/li>\n
  2. Turn on Encryption.\u00a0<\/strong>If setting a passcode did not automatically encrypt your phone or tablet, make sure to enable the native encryption (encryption comes standard with most phones)
    [Instructions for:     iPhone and iPad<\/a>, Android<\/a>, Windows<\/a>, BlackBerry<\/a>, Microsoft Surface RT<\/a>]<\/li>\n
  3. Keep your system and applications up to date<\/strong>. Check to see that your device and applications are up to date, then set them to update automatically. This is the quickest way for the developer to provide you with the most up-to-date protection and can patch security holes that leave you vulnerable.
    \n[Instructions for:\u00a0    iPhone and iPad<\/a>,\u00a0Android<\/a>,\u00a0Windows<\/a>,\u00a0BlackBerry<\/a>,\u00a0Microsoft Surface RT<\/a>]<\/li>\n
  4. Download Apps from trusted sources sources only.<\/strong>\u00a0If an app looks like it’s coming from a suspicious source, that’s probably because it is. \u00a0Pay attention to permissions and rights that the app requests.<\/strong>\u00a0When an app asks for permission to make changes to your device, take the time to read through the changes.\u00a0 The original app may have been tested for malware by the app store, but updates come straight from the author, not from the app store. This is a commonly used way to compromise phones and tablets.<\/li>\n
  5. Install antimalware.\u00a0<\/strong>Yes, even on your phone, and set it up to automatically update and scan. There are a number of trusted vendors available online. Android phones also now come with a form of built in protection<\/a>.<\/li>\n
  6. Enable Find my Devices.<\/strong> Consider enabling services that allow you to locate your phone if it is lost, send a message to it, or even wipe its contents remotely if you need to.\u00a0
    [Instructions for:     iPhone and iPad<\/a>, Android<\/a>, Windows<\/a>, Blackberry<\/a>]<\/li>\n
  7. Use the VPN.<\/strong>\u00a0Be wary of connecting to insecure WiFi hotspots. The WiFi you might use to check your email or your bank account balance at your local cafe is likely not protected and is transmitting information to you without encryption. For a more secure option, choose to connect through a VPN\u00a0like the one offered here at BU<\/a>. For instructions on installing and using a VPN on your device look\u00a0here<\/a>.
    \nBoston Medical Center\u00a0also has a secure remote connection option; for details, contact the BMC\u00a0Service Center at 617-414-4500<\/li>\n
  8. Back up your device. <\/strong>It is important to back up your device to prevent any data lost in the event that it is lost or stolen.<\/li>\n
  9. Reset your device.\u00a0<\/strong>In the event that your device is lost or stolen, you have an easy way to securely erase the data stored on your device. This will help you to avoid becoming a victim to a compromised device.
    [Instructions for:     iPhone and iPad<\/a>, Android<\/a>, Windows<\/a>, Blackberry<\/a>]<\/li>\n<\/ol>\n

    <\/div>\n<\/div>\n\n

    Laptops and Desktops<\/h4>
    <\/p>\n

    Here are the top things you can do to secure your laptop and desktop:<\/p>\n

      \n
    1. Use a password<\/strong>.\u00a0Follow best practices<\/a> and set auto log-off\/screen lock to no more than 15 minutes. This is the easiest way to prevent a thief from accessing sensitive information.
      \n[Instructions for setting a password:\u00a0      Windows 10<\/a>,\u00a0Mac<\/a>]<\/li>\n
    2. Encrypt your hard drive<\/strong>. If you work with medical information, financial account information, or social security numbers belonging to other people your device needs to be encrypted.\u00a0\u00a0Encryption is available for free from Boston University<\/a>, and personal computers now come standard with encryption, but you must turn it on for both Mac (FileVault<\/a>) and Windows machines (Bitlocker<\/a>).
      \nEncryption is also available for free from Boston Medical Center. \u00a0You can request the software using the\u00a0      BMC Service Request System<\/a>\u00a0 or by\u00a0contacting the Service Center at 617-414-4500<\/li>\n
    3. Keep your computer and applications updated<\/strong>. Patches are delivered through updates to help close any vulnerable holes you might have on your system, protecting you from malicious attempts to corrupt your computer. Though the updates may seem like a nuisance, pick a convenient time to perform them (no more than 30 days from notification) or have them installed automatically.
      \n[Instructions for:\u00a0      Windows<\/a>,\u00a0Mac<\/a>,\u00a0Java<\/a>,\u00a0Adobe Acrobat<\/a>,\u00a0Flash<\/a>]<\/li>\n
    4. Use a secure connection\u00a0(often called a “VPN”) to connect to the internet<\/strong>. Secure connections provide a protected encryption tunnel for information to travel through between your computer and the network. This is particularly important when you connect to WiFi hotspots in public areas, where any information you send across the internet can otherwise be easily read by anyone else on that same network. \u00a0[Connect to the BU VPN<\/a>,\u00a0For more information on BMC Secure Remote Access, please contact Boston Medical Center\u2019s Service Desk at 617-414-4500.]<\/li>\n
    5. Install Threat Protection Software.<\/strong>\u00a0These types of software will help prevent both active and passive cyberattacks.\u00a0CrowdStrike<\/a>\u00a0is available for free from BU for both Mac and Windows computers.
      \nFor more information on security software for BMC owned devices, please contact Boston Medical Center\u2019s Service Desk \u00a0using the\u00a0      BMC Service Request System<\/a>\u00a0 or calling 617-414-4500.<\/li>\n<\/ol>\n

      <\/div>\n<\/div>\n\n

      USB Sticks and CDs<\/h4>
      <\/p>\n

      Securing the devices you use for backup or file transfer is just as important as securing the devices you use for everyday activity, USBs and CDs are significantly easier to lose or have stolen because of their portability. It is very important to make sure that the information you keep on these devices is protected by encryption.<\/p>\n

      Here are the top things you can do to secure your USBs and CDs:<\/p>\n

        \n
      1. Choose a device with hardware encryption built-in<\/strong>. Though typically a little more expensive, hardware encryption offers a high level of security at the core of your device. Consider this option if you’re looking for the best protection.
        \n— Or \u00a0—
        \nSet up encryption for your device.<\/strong>\u00a0If \u00a0your device does not have built-in encryption, you can encrypt it yourself. Once your device is encrypted a password will be required to access all files and folders, making it that much more difficult for someone else to gain access.\u00a0Boston University also provides it’s         own encryption service<\/a>.<\/li>\n
      2. Store your password safely. Resist the urge to write the password to your device directly on the CD or attached to the USB. Should you need to share the password, it should be provided via a secure network like\u00a0DataMotion SecureMail<\/a>
        \nSecure Email and secure file transfer solutions are\u00a0also available from\u00a0Boston Medical Center. \u00a0For details, contact \u00a0the Service Center at 617-414-4500 or by\u00a0using the\u00a0        BMC Service Request System<\/a>.<\/li>\n<\/ol>\n

        <\/div>\n<\/div>\n\n

        Email<\/h4>
        <\/p>\n

        Just as important as securing your devices is using secure e-mail for communications when sensitive information is involved. Regular e-mail is not encrypted or protected in any way. If a message is ever sent across the public Internet (for example as will happen if your mobile device downloads the e-mail message), the message may be intercepted and read by someone else.<\/p>\n

        Secure e-mail solutions are available from both BU and BMC:<\/p>\n