Stay Secure - Employee Guide

Protect Yourself, Your Computer, & UAB Make your passwords easy to remember, but hard to guess. Lock or logoff your computer any time it is unattended. Keep your system up to date on patches (Operating System, anti-virus, etc.) NEVER enter any personal information on a site that is not encrypted (note the yellow padlock in the bottom right corner of your browser window. Do not click links in emails from people that you do not know. Report any spam or phishing attempts to UAB or other authorities. Data Security Best Practices What Can UAB do for YOU? UAB provides services to help you stay safe... UABfile: Each UAB employee is provided 1Gb of storage on UABfile (additional space is available at $45/Gb per year). UAB-file is located in a secure facility and backed up daily. Contact AskIT (996-5555) for more information. PGP Whole Disk Encryption: UAB is rolling this software out to high risk areas in October 2007 to protect data in case of loss or theft. Anti-virus Software: Available for use in the office or at home at no cost to UAB faculty, staff, researchers & students. Policies & Guidelines How to Set up Spam Filters Wireless Security UAB Drop Box: Need to deliver large files to people without clogging up your email accounts? Data Security Incidents Notify Data Security (975-0842) immediately if you notice anything unusual or suspicious. Security incidents include: Unauthorized use of a system or password Theft of or damage to UAB equipment Violations of UAB standards & policies Malicious code or hacking attempts Breaches of any type of sensitive data Incident Handling Procedures AskIT The University's computer help desk provides information technology support to all UAB researchers, faculty, staff & students. 996-5555    www.uab.edu/it/askit/    askit@uab.edu

Cyber Security 101 Protect your username & password. Keep anti-virus software current. Logoff/lock machine when you are away. Keep your system up-to-date on patches. Do not click links in emails from unknown sources. Never provide personal information via email. Report any suspicious activity to the Data Security Office. Examples of Inappropriate Activity Sharing of passwords or private keys. Copyright and licensing violations: software, digital media (movies, videos, music), etc. Transmitting sensitive information (grades, medical records, financial data, etc.) without permission. Spamming persons or groups. Electronic communication forgery (including email). Overflowing email accounts with unreasonable quantities of data or messages. The complete Acceptable Use Policy Sensitive Data - It's not what you think... Sensitive data is any one or more pieces of information that can be used to identify a person. It can be a combination of: Name Social Security Number Date of Birth Medical Diagnosis Credit/debit card numbers Passwords, security codes & PINs IT Data Security Office 204 Cudworth Hall 1919 University Blvd. Birmingham, AL 35294 205.975.0842 Office 205.975.2855 FAX datasecurity@uab.edu