Week 3: Secure IT at Work
This article applies to: National Cybersecurity Awareness Month
Be sure to stay safe online at Cornell.
When in doubt, throw it out. Stop and think before you open email attachments or click links online. Links in email, instant messages, and online posts are often the way cybercriminals compromise your computer. If it looks suspicious, it’s best to delete it. Always think twice before you click on anything.
Two resources you can use when you receive an email that claims to be from Cornell:
- Verified Communications - Official Cornell email messages.
- Phish Bowl - Fraudulent email known to be circulating at Cornell.
Back it up with EZ-Backup. Make electronic and physical backups or copies of all your important work. Data can be lost in many ways, including computer malfunctions, malware, theft, viruses, and accidental deletion. Cornell's EZ-Backup service is available for faculty and staff.
Guard your devices. In order to prevent theft and unauthorized access, never leave your laptop or mobile device unattended in a public place, and lock your devices when not in use.
Secure your accounts with strong passwords. This goal is easier to meet when you use techniques like passphrases and services like Cornell's LastPass secure password management. Never share any of your usernames or passwords with anyone. When available, turn on or expand the use of multi-factor authentication like Two-Step Login for an added layer of security beyond the password.
Report anything suspicious. If you experience any unusual problems with your computer or device that you suspect may be due to a compromise, change your password immediately and contact the IT Service Desk.
Week One: If You Connect It, Protect It
Week Two: Secure Your Home