When possible, use a York-owned and IT-managed computer for performing York work. This helps ensure it is configured to help keep your work and data secure, and kept up to date with security enhancements and features as they become available. Any computers should be using the following security features:
- Enable automatic updates for your operating system, web browser, and other common applications.
- Install anti-virus software and keep it updated.
- Enable the computer’s firewall feature.
- Enable a screen lock to ensure that your device cannot be accessed if left unattended.
See more information on device security on the Information Security website.
Remote Access
Use of the York VPN service is recommended when accessing York systems from unsecured public WiFi (such as airports, cafes, etc.). Otherwise, it need only be used if accessing certain services that require it, such as FAS shared drives. The VPN is not required for use of Office 365/yuoffice services.
Handling Files and Data
- Avoid downloading York data to devices that are personally owned or unmanaged. If done temporarily, ensure the data is deleted after use.
- Use OneDrive, Teams, or Sharepoint for secure and convenient sharing and collaboration of files.
- FAS shared drives can continue to be used by connecting to the York VPN service.
Backup Important Data
It’s important to consider if important data is backed-up in case of mishaps or cyber incidents that could damage devices or data on them. Using services such as OneDrive, Teams, Sharepoint, or FAS drives for file stored ensures they are automatically backed-up by those services.
Accounts and Passwords
Use a strong password for your Passport York login, and do not use that password with other services or non-York accounts. Ensure that you are set up to use Duo 2FA service integrated with Passport York.
Fraud and Phishing
Fraud and phishing is becoming more and more common. Be wary of typical frauds such as asking for your password to remotely “fix” a computer issue, email warnings about package delivery failure that ask you to click a malicious link, notice of unexpected lottery winnings, or an ask from someone from work that is urgent and unexpected such as to provide gift card codes or a financial transaction or change that does not follow normal procedure.
York IT personnel will NEVER ask for your password.
For more details on how to protect yourself from cyber fraud and phishing, see the awareness courses and content available at https://infosec.yorku.ca/cybersecurityawareness/
More Information, Notifications, and Reporting a Cybersecurity Issue
See the Information Security website at https://infosec.yorku.ca for additional guidance and help staying up to date on cyber news and alerts.
Inquires or incident reports can be directed via email to infosec@yorku.ca.
