An Cosantóir

tac aide - 10 + 10 security tips PART 1 | 25 DIRECTOR OF COMMUNICATIONS AND INFORMATION SERVICES CORPS (DCIS) 10 + 10 Security Tips for protecting your computers and information IT OPERATIONS SECTION AT WORK 1. Ensure your anti-virus software is running: You must make sure that you have anti-virus software installed on your PC and that it is up to date. If a virus is detected, disconnect from the network and call your local IT Helpdesk. Up to date Out of date 2. Use a strong password: Your password is your personal key to access your information. Choose a strong password that is hard to guess but easy to remember and never write it down. For example pick a phrase and change letters for numbers or special characters like "G0!ngF0rAWa!k" 3. Sharing passwords: It is strictly forbidden to disclose your password to anyone else. This includes writing down your password. You are respon- sible for all actions while your account is logged in. 4. Leaving your PC unattended: Unattended PCs must be locked or logged-off. 5. Store all classified information securely: The CISN is rated for up to restricted classified docu- mentation only. Any higher classified documentation must be handled according to the appropriate Infosec Policy. 6. Proper use of e-mail: Always double-check the addresses of the recipients and the proper classification. If you are unsure about the nature or source of an e-mail you have received, DO NOT open it. 7. Protect digital information: Learn how to maintain the need-to-know principle for digital informa- tion by utilising privacy markings and security classification as per the Manual of Military Security. Ensure your information is backed up by saving it on your network drives. Information on your desktop or PC hard drive is NOT backed up. 8. Never change hardware or software configuration yourself: New hardware or software requests must be submitted to your local IT Helpdesk. 9. Use only DCIS issued computer media: Computer media such as storage devices and software for use on DF Networks must be issued through official channels. 10. Reporting of information security incidents immediately: Any information security incidents should be reported to your local IT Helpdesk and your Unit Security officer immediately. This includes any sign of computer misuse and security breaches as well as any software or hardware security threats such as viruses. AT HOME 1. Use virus protection software: Use anti-virus software that supports automatic updates of new virus definitions. Schedule your software to automati- cally scan all of your computer files regularly. 2. Use a strong Password: Restrict access to your computer by changing all default passwords. Then use a strong password that it is hard to guess but easy to remember. 3. Keep your system patched: Keep your operating system (e.g. Windows XP, Vista, etc) and all application patches up to date. Today, most vendors offer automatic updates. If yours do not, you may need to check their websites periodically or join their mailing lists. 4. Use a firewall: Use a personal firewall or the built-in firewall functions of the operating system or the anti-virus software. Learn how to configure it, to allow, only the services you want (e.g. mail, Web browsing, etc.) 5. Back up your important data: Back up regularly all important files that you cannot replace easily on external media (e.g. CDs, DVDs). Keep them in a separate place. 6. Do not open unknown or unsolicited emails: Do not open unknown or unsolicited email messages regardless of how tempting the subject line or attachment may be. Be suspicious of any unexpected email attach- ments. Disable scripting features (e.g. Javascript, ActiveX etc,) in email programs such as Outlook. 7. Do not keep computers on line when not in use: Either shutdown your computer or turn off your Internet connection when you are not using it. Otherwise you risk your computer being hijacked and turned into a "zom- bie" doing things that you do not know about. This is essential for those using the popular broadband Internet connections. 8. Protect your personal information online: Know who you are dealing with online. Never browse the internet with an administrator account, instead create and use accounts with limited privileges. 9. Protect your wireless network: Place your access point in the centre of your home, away from outside walls, change the default Service Set Identifier (SSID) name and enable its security feature – preferably Wi- Fi Protected Access (WPA2). Consider enabling the Media Access Control (MAC) Filtering. 10. Make an image of your computer in case it is damaged or compromised: For quick recovery from a hardware failure or security compromise create a full system back up (disk image) or recovery disks of your computer configuration. THE DEFENCE FORCES MAGAZINE

• Cover