1. Common sense solutions to data privacy observed by each employee is the crucial first step toward data security Data Privacy/Data Security Contact IRT Help Desk @ 895-2020 Email: consult@drexel.edu

2. Any data which can be described as personally identifiable information (PII) and which can uniquely identify, contact, or locate a single person or can be used with other sources to uniquely identify a single individual (such as SSN, DOB) What is Sensitive Data Contact IRT Help Desk @ 895-2020 Email: consult@drexel.edu

3. Best Practices - Equipment  Physical Security of Equipment  Do not leave your office unattended with your computer logged on. Lock your desktop when stepping away. All operating systems have a simple keystroke to accomplish this.  Log off when leaving for long periods of time.  Secure laptops in a locked office or desk  Secure flash drives in safe location Contact IRT Help Desk @ 895-2020 Email: consult@drexel.edu

4. Best Practices - Passwords  Secure passwords  Are at least 6 characters in length  Contain one or more upper case letters, numbers and/or symbols  Are not a word in a dictionary, a recognizable name or other personal character string, such as birthdate  Passwords are a lot like your ATM pin number…keep it protected.  Passwords should never be written down and left in the open or shared with anyone including supervisors, colleagues, family members, etc. IRT helpdesk staff will not ask for your password so don’t reveal it. Contact IRT Help Desk @ 895-2020 Email: consult@drexel.edu

5. Best Practices – Email and Files  Secure your Email and Attachments  Log out of your email account when you are not at your computer  Do not transmit sensitive data via email  Use secure file shares or secure collaboration services such as Sharepoint  Do not store attachments or reports containing sensitive data on your hard drive Contact IRT Help Desk @ 895-2020 Email: consult@drexel.edu

6. Data Encryption Procedures—What you can do now  Enable built-in encryption features of the Windows 7 and OSX operating systems. Contact IRT for assistance with this. Update/upgrade your operating system Windows and Mac OS have built-in encryption utilities  Secure Flash drives  Require a password to access the data on the drive. If your flash drive did not come with security software, free utilities are available for this. Contact the IRT Helpdesk. Contact IRT Help Desk @ 895-2020 Email: consult@drexel.edu

7. Personal Mobile and Portable Devices  Secure personally owned computers and flash drives and personal data in the same way you secure university owned computer and university data  Enable password protection on your Smartphones  Each of us can be personally prudent about how and where we transmit files/information over open networks. Verify that websites are secured (https) Contact IRT Help Desk @ 895-2020 Email: consult@drexel.edu

8. Personal Data  Think about the information you post or transmit about yourself—location, personal phone numbers, family members, photographs  Password reset questions often ask for personal info that you might also have shared online. Be aware of this.  Social Media  Smart Phones  Tablets Contact IRT Help Desk @ 895-2020 Email: consult@drexel.edu