National Cyber Security Awareness Month: Secure at Work
This week, try these steps to improve your cyber security at Cornell:
When in doubt, throw it out. Stop and think before you open attachments or click links in emails. Links in email, instant message, and online posts are often the way cybercriminals compromise your computer. If it looks suspicious, it’s best to delete it.
Two resources you can use when you receive an email that claims to be from Cornell:
- Verified Communications, official emails currently being sent out
- The Phish Bowl, examples of malicious email known to be circulating
Insure against ransomware by using backup services like EZ-Backup. Make electronic and physical backups or copies of all your important work. Data can be lost in many ways including computer malfunctions, malware, theft, viruses, and accidental deletion. Cornell's EZ-Backup service is available for faculty and staff.
Guard your devices. In order to prevent theft and unauthorized access, never leave your laptop or mobile device unattended in a public place, and lock your devices when they are not in use.
Secure your accounts with strong passwords. This goal is easier to meet when you use techniques like passphrases and services like Cornell's newly introduced LastPass password management tool. Do not share any of your usernames or passwords with anyone. When available, turn on or expand the use of stronger authentication like Cornell Two-Step Login for an added layer of security, beyond the password.
Report anything suspicious. If you experience any unusual problems with your computer or device that you suspect may be due to being compromised, contact the IT Service Desk.