In our summer long series on security awareness, we’ve reviewed strategies and practices that can improve and protect your digital life. Putting these ideas into practice reduces the risk of an untoward event, improves data security at Colgate and can put your mind at ease knowing you are prepared and ready for any attempts at intrusion or loss.
Think about how you use your device and where. Know where your device connects and keep it with you. Review the risks to devices and data when you travel, when you connect to someone else’s network and when you access the web and email. If your computing environment changes – question it. ITS announces changes we make ahead of time and so do most service providers, like Google.
If you manage a database or file share, it’s critical to include a review of permissions at least annually. Here’s a quick list of what to review:
- Do you have a process for adding and taking away permissions as staff or students change their access needs?
- Do individuals that access the information understand the level of confidentiality of the data they use?
- Have all the individuals with access been appropriately trained to use the database?
- Are there any roles that can be eliminated?
- When access is granted, do individuals have the least access they need to accomplish their duties?
- Are responsibilities separated, so that there are checks and balances against accidents?
If something does happen, know that ITS is here to offer advice and help mitigate any suspected loss or intrusion. Remember to contact Campus Safety if a device is lost or stolen.
For more information, contact the ITS Service Desk at extension 7111 or email ITSHelp@colgate.edu.
Contributors: Ellen Holm, Ahmad Khazaee, Kevin Lynch, and Mark Hine.