Work from Home Security Considerations
Handling of information
Confidential information should not be stored on personal devices, including personal computers, cellphones, or USB drives.
Employees should avoid using shared (family) computers to perform work-related tasks.
Sensitive printed documents should not be placed in the garbage or recycling. Any sensitive information that is printed at home should be shredded when no longer needed or saved to be returned to campus.
Virtual meeting security
Ensure that all Zoom meetings have a password.
Avoid using your Personal Meeting ID to host public events.
Consider using the waiting room feature to prevent uninvited guests.
Lock the meeting once it has started to prevent unwanted participants from joining.
Phishing, malware, and fraud vigilance
Scammers are using concerns about COVID-19 to lure people into falling for phishing. Use caution and be wary of any COVID-19 emails or articles that request that you provide login information or download a program to view the information.
The IRS stimulus payment or tax refunds are also likely to be topics that are exploited by scammers.
Thoroughly research any organizations claiming to be collecting money for COVID-19 relief before donating.
Caution with USB drives
If you don’t know what other devices the USB drive has been plugged into, avoid using it with your work computer to prevent the transfer of malware.
References
New York State, Stay Cyber Safe
Center for Internet Security, Securing Your Cyber Office
National Cybersecurity Alliance, COVID-19 Security Resource Library
CrowdStrike, Situational Awareness