Office of Information Technology

Securing your mobile devices and smartphones is as relevant or perhaps even more critical as securing your computer. Your smartphone contains a wealth of personal information such as pictures, passwords, email, phone numbers, and contacts. A lost or stolen or unsecured smartphone could expose personal data and lead to identity theft and fraud.

Below is a short list of some basic Smartphone safety tips to help protect your smartphone.

• Password-protect your device.
• Keep your operating system updated.
• Enable strong password protection on your device and include a timeout requiring authentication after a period of inactivity.
• Download applications from reliable resources such as the Apple Store and Google Play.
• Be cautious with public Wi-Fi, only connect to secure networks you know. Avoid unidentified Wi-Fi hotspots.
• Disable Bluetooth and Near Field Communication (NFC) capabilities when not in use.
• Review your mobile device manual to learn about the specific features of the device.
• Backup your device on a regular basis.
• Install a locator app.
• Be sure to wipe your mobile device using the built it “factory reset” function to delete your data before returning, reselling or discarding your smartphone.

Keeping your computer safe and secure has become more difficult as computers are interconnected through the Internet and other networks.

Safety tips to help secure and protect your computer:

• Keep your firewall turned on.
• Do not buy security software in response to unexpected pop-up messages or emails.
• Use strong passwords.
• Set your operating system to update automatically.
• Use the most current version of your browser.
• Do not install plugins or add-ons into your browser unless you need them to run a particular application.
• Keep all essential browser plugins and add-ons update to date.
• Back up your files.
• Do not download unfamiliar software from the Internet. If you must, run a virus scan on the download before installing the application.
• Log off or lock your computer when leaving the device unattended.
• Do not open attachments from unknown sources.
• Do not use free public or unencrypted (unsecured) Wifi.

For additional information on staying safe and secure, visit the following websites:

• StaySafeOnline.org
• SANS Security Awareness Tips

Unless you take steps to secure your router, you are vulnerable to people accessing information on your computer, using your Internet service for free and potentially using your network to commit cybercrimes. Change the default factory setting of your wireless router.

Below is a list of simple tips for keeping your wireless network secure. Review the manual of your wireless network for detailed information on changing the setting.

• Change the default name (SSID – Service Set Identifier) of your router.
• Change the default password.
• Change the security level to WAP or WAP2 if available.
• Best Practices for Keeping Your Home Network Secure

Security Awareness Tips

Each day SANS posts a new tip that focuses on and explains a specific topic and actionable steps people can take to protect themselves, their family and their organization.

View the SANS Security Awareness Tip of The Day

Call the three national credit reporting organizations immediately to place a fraud alert on your name and Social Security number for a stolen a wallet or credit card. The alert means any company that checks your credit has to contact you to authorize new credit.

Here are numbers you always need to contact if your wallet, etc., has been stolen:

1. Equifax: 1-800-525-6285

2. Experian (formerly TRW): 1-888-397-3742

3. Trans Union: 1-800-680-7289

4. Social Security Administration (fraud line): 1-800-269-0271

You can get a free credit report once a year from each of the three credit reporting agencies.  https://www.annualcreditreport.com/index.action

When visiting the “https” secure sites, you may see an onscreen warning, such as “There is a problem with the website’s security certificate” or “Secure Connection Failed.” Don’t just click to continue or to make an exception. The warning may only indicate that there is a harmless temporary problem with the site or with the network. But it can also mean that the site is bogus or has been compromised by hackers.

Contact the bank or retailer by phone to find out if they know about a problem with their website or the network. Don’t be the next victim of fraud.

Backup necessary files on a regular basis and store the backups in a safe place. (Preferably off-site.)

1. Anti-virus. A reliable, effective anti-virus program with the latest updates. Both licensed and free anti-virus software are available. Whichever you use, make sure it scans incoming and outgoing emails for malware.
2. Anti-spyware. Reliable effective anti-spyware is a must for securing your computer. Both licensed and free anti-virus software, such as Windows Defender, are available.
3. Two-way Personal Firewall. Two-way personal firewall software monitors network traffic to and from your computer and helps block malicious communications.
4. Anti-Keylogger software. Anti-Keylogger software products, like AntiLogger and Keyscrambler Personal, help prevent what you type on your computer, especially sensitive information such as the usernames, passwords, and financial information you use in making online transactions, from being hijacked by Bad Guys.

— Ramkumar Raghavan

Before you get rid of electronics, be sure you delete or remove of all personal files and data.  Most states have banned computers and components from landfills. Look for  recycling programs in your area.

You should:

1. Contact the three major credit bureaus and have them place a fraud alert on your credit report.
2. If a credit card was involved, contact the credit card company and close the account. Contact your local law enforcement agency and file a report.
3. File a complaint with the Federal Trade Commission.
4. Document all conversations, so you know whom you spoke to and when.

Always read the privacy statement before you fill in the blanks. You should also verify that the site is using encryption before you submit any information – look for https in the web address and a padlock or key in the lower right corner of your browser. Don’t send your personal information (social security number, credit card number, etc.) in an email or through instant messaging.