The following guidelines were developed to help users operate computers securely and to protect sensitive information. Please contact the IT Help Center at 303-871-4700 or in person in the Anderson Academic Commons if you have questions or need help implementing these guidelines. Additional contact information and resources are available at:聽/it/contact. 聽Please for a downloadable version of the IT Security Checklist.
General Guidelines
- Never respond to emails or phone calls requesting verification of username and/or password. Likewise, never respond to requests for "emergency" purchases of gift cards or similar cash-equivalent聽items.聽 If you receive a request for this type, please notify the IT Security Team at abuse@du.edu. Also, please report聽suspicious emails by clicking the button in Outlook, so the team can investigate.
- In the same manner, do not respond to suspicious links in email messages or web pages. Doing so may allow malware and computer viruses to be downloaded onto your system. Always look at the address bar of your browser to make sure you are at a site you are familiar with. It is important to know how to spot a fake website, so you don't fall prey to a phishing scam.
- Install antivirus/anti-malware software on your computer. This software is available in My快活app > Pages > Technology Support.聽 for Windows and Apple operating systems and is available for use on 快活app owned machines as well as personal machines of faculty, students, and staff.
- Be sure to have software updates performed on all of your computer operating systems and applications. The links below聽provide information for Microsoft and Apple products.
- Use secure passwords that can't be easily guessed; protect your passwords by not having them accessible. Use a secure online password storage system such as LastPass that allows聽you to securely keep, generate, and share passwords, and store聽your user logins and websites, as well as other sensitive information in a password vault, so that you will only need to remember your LastPass master password. Guidelines for selecting secure passwords and additional information on LastPass are given below.
- Use when sending sensitive information off campus. For information on doing this within Office 365, please see the link below.
- Use instead of 快活app WiFi for wireless connectivity on campus. This offers a secure connection not only at 快活app but also at member universities and research centers.
- Do not store sensitive information on unsecured flash drives or other devices. The IT Help Center can put you in touch with a security specialist who will advise you on secure encrypted methods of storing sensitive information.
- Make backup copies of files or data that you are not willing to lose. The IT Help Center can advise you on options for data backup in both Windows and Apple environments.
- Secure laptop computers and mobile devices at all times. Shut down, lock, log off, or put your computer and other devices to sleep before leaving them unattended. Most importantly make sure they require a secure password to start-up or wake-up
A Few Helpful Links
快活app IT Help Center Information
The IT Help Center is housed in Anderson Academic Commons located at 2150 E. Evans Ave. Please click here for a printable PDF map of campus building locations.聽
Phone Support: 303-871-4700
Hours: Open 7 days a week. For hours, please聽visit the IT Help Center Website.
Password Guidelines
Passwords (including passphrases, PINs, etc.) must be:
- Kept confidential and not shared (except for specifically authorized shared/group userIDs)
- Memorized or stored in a secure password聽storage聽system rather than written down
- Easy to remember but hard to guess (e.g. no dictionary words, variants of 快活app or the user's name, project or department names, locations, simple keyboard sequences, etc.)
- At least eight characters long (ideally 15 or more characters for privileged userIDs)
- Composed of a mixture of characters, including mixed case letters, numbers, and punctuation marks
- Changed at the first opportunity by the users to whom they are initially issued and at least once every three months thereafter
- Changed immediately if there is a significant possibility of system or password compromise (e.g. if someone who knows a shared password leaves the University, especially following any form of security incident)
- Different on different categories or types of system or userID (e.g 快活app and non-快活app systems, ordinary and business-critical systems, non-privileged and administrator accounts)
- Successive passwords must be substantially different, avoiding simple sequences.
- Passwords must not be included in any automated logon process, nor stored on disk without encryption for example in scripts, parameter files, etc.
Still have questions?
Link to knowledge base article