Good Practice

Enable Security Features on Your Device

Challenge

Older or unpatched software increases exposure to vulnerabilities in the operating system, application software, and apps that can allow attackers to control your system or steal your private data.

You have private data (i.e., academic records, your tax information, your family's information) stored on your personal device. If your device is lost or stolen, the private information could be accessed by whoever has your device.

How can you protect private data stored on your device or transmitted to others from your device?

Solutions

Use Automatic Updates to Always Apply Updates When Notified

To keep your computer or device current, enable automatic updates.

The automatic updates feature included with the operating system is usually on by default. Choose the automatic update setting option when installing software or apps.

Some updates require a restart of the software application or the computer/device to complete the installation.

You can also download individual updates if one fails or if the auto-update did not include it.

Use Full Disk Encryption

When full disk encryption is turned on, everything stored on the device is automatically encrypted; you do not have to decide what or what not to encrypt.

Use the full disk encryption, which is usually included with the computer/device operating system. Sometimes you need to enable this feature, and sometimes it is on by default.

Note: When traveling abroad, some foreign countries do not allow encryption. To learn more, see Technology Guidance for International Travel.

Use a Firewall

Firewalls provide some protection from others on the internet who are attempting to obtain unauthorized access to your computer or device.

Use the firewall included with your computer/device operating system. It will provide basic firewall functionality and protection. This is usually enabled by default.

Caution: Misconfiguration of a firewall can prevent all Internet access on your computer/device.

Use Anti-virus/Malware Detection Software

Anti-virus software provides protection from getting infected with malicious software also known as malware. It can never protect you from all malware.

Use the anti-virus software included with your computer/device operating system. This is usually enabled by default. Another option is to purchase and install anti-virus software from a reputable vendor. In either case, actively use the anti-virus software.

Caution: When switching anti-virus software, begin by uninstalling other anti-virus programs that may be installed on your computer.

Use Encryption on the Device or Storage Media

Encryption does not protect data if someone else uses your password associated with the encryption. Use encryption on USB devices and external hard drives. 

Note: When traveling abroad, some foreign countries do not allow encryption. To learn more, see Technology Guidance for International Travel.