Was this helpful?

Suggest Improvements

Dispose data securely

On both Windows and Mac, when you move your files to the Recycle or Trash application, the data isn’t fully deleted until you go to the application and clear the data, often referred to as “emptying” your Recycle Bin or Trash.

This two-step process is in place to protect users from accidental deletions, but it can lead to data exposure risks when the process isn’t completed.

Do NOT use, store, or display Social Security Numbers unless required by law.

Period.

Don’t open suspicious attachments or click unusual links in messages.

They can appear in email, tweets, posts, online ads, messages, or attachments, and sometimes disguise themselves as known and trusted sources.

Don't use USBs or other external devices unless you own them

To avoid infection by malware and viruses, ensure that all external devices either belong to you or come from a reliable source.

Encrypt

Encrypt portable media, including laptops and thumb drives, that contain sensitive information. Encrypt any sensitive data you send outside of the company, like to an accountant or a shipping service.

Windows:

Turn on device encryption - Microsoft Support

Mac:

To check whether your data is being encrypted automatically via FireVault on your Mac, please follow the steps below:

Click on the Apple icon on the left top corner of your screen
Select System Settings
A window will pop up, select Privacy & Security on the side bar
Scroll down to the Security section, under FireVault, there will be text indicating that your data is being encrypted automatically on the Mac by FireVault.

If your encryption status does not indicate that your computer is encrypted, refer to Protect data on your Mac with FileVault.

Know what you're installing - Check the source

To avoid malware, make sure your software comes from a reputable source.

Be particularly suspicious of sponsored software (software that relies on advertising) or software that claims to speed up your Internet connection.

Limit login attempts

Limit the number of incorrect login attempts allowed to unlock devices. This will help protect against intruders.

Lock Your Phone

Set your phone to lock when you’re not using it and create a PIN or passcode to unlock it. Use at least a 6-digit passcode. You also might be able to unlock your phone with your fingerprint, your retina, or your face.

Report security incidents

If a message seems suspicious, first report it to itprotect@umass.edu.
Report Phishing Attempts in Microsoft Outlook
Report identity theft: If you think someone has gotten into your accounts or has your personal information, visit IdentityTheft.gov. There, you’ll get steps to take to find out if your identity has been misused, and how to report and recover from identity theft.

Secure your files

Back up important files offline, on an external hard drive, or in the cloud. Make sure you store your paper files securely, too.

Google Drive - Google Workspace F.A.Q.

Update your software

Keep your operating systems & programs updated. Updates to your operating system often include critical patches and protections against security threats. Set your phone to update automatically. Otherwise, keep an eye out for updates, and don’t delay in running them.

This includes your:

Apps
Web Browsers
Operating Systems

Apple User - How to manually update apps on your Apple device

Use secure Wi-Fi networks and VPNs

On campus: Use secure wireless - eduroam
Off campus: Use a virtual private network (VPN) to connect securely to the campus network from off-campus (e.g., to access some campus servers or online library databases).

Use trusted applications

The University has a complete guide that details the most secure places to store your data. In general, you should only store your data in applications provided by the University. For example, sensitive information is considered to be secure in UMass Amherst Google Drive but is not secure in your personal Google Drive.

Did you know that UMass Amherst provides FERPA certification for faculty and staff?

FERPA (Family Educational Rights & Privacy Act) does two things:

Allows current and former students access to their own educational records.
Ensures the privacy of their records.

All University employees are legally and ethically obligated to protect the confidentiality of student records.

You will learn more about directory information, circumstances which allow disclosure of academic records without prior consent, and "legitimate educational interest" as you work through the training.