...
- As a general rule, whether using a CUE-issued device or a personal one, secure your home router by changing it's default password, and also it's default network name (SSID).
- As much as possible, use separate devices for work and personal use. This minimizes the possibility that if a device is compromised on personal use, work activities done on that device could be compromised, as well.
- Keep your operating system up-to-date. This will mitigate any vulnerabilities that can may come up from time to time. This goes the same for keeping your other installed software up-to-date.
- Make sure your device has the auto lock feature turned on. After a period of inactivity, your machine will go into sleep mode. But, as an added precautionary measure, never leave your device unattended.
- Avoid the use of public charger kiosks. You never know who/what is on the other side of that charger cable.
- Make sure files are not locally stored on your device's hard drive, but rather stored on the network drives mapped to each employee or to your Google Drive.
- Email should not be used to send confidential information. If you have to send a document that contains sensitive information, send it as a password-protected document. The password must never be sent together with the email; it must be communicated over to the receiving party by phone or by any other methods that does not involve email. The best ways to share files are through your shared drives or Google Drive.
- When logging in to Online Services, Moodle or to your email, make sure that login page is as shown below, and that the URL starts with identify.concordia.ab.ca/
Passwords
- Employee passwords are expired after 60 days, and need to be changed. An email reminder to password expiry is sent 7, 3 and 1 day before the expiry date of the password. Passwords can be reset remotely through Online Services. For more information on this, please contact helpdesk@concordia.ab.ca
- The reuse of passwords used in the past year is not allowed.
- The use of strong passwords is enforced on all CUE services. Passwords have a minimum requirement of an 8-character count, with a combination of capital/small letters, numbers and special characters. Passwords that uses common words or those that are related to an individual, such as their address, birthday, or family member names, are highly discouraged.
- The use of 2-factor authentication on CUE services that allow for it is highly encouraged.