Physical Security of Sensitive Data
The physical security of computing resources (computers, equipment, files, etc.) is actually the first principle of good security, because as long as someone can obtain physical access to your computer he/she can gain control over it. By instituting a few simple safeguards, you can greatly limit security breaches and other unauthorized access to computing resources. Here are a few helpful hints to safeguard the physical security of items that are your responsibility:
- Do not store sensitive data on local computer hard drives (laptops or desktops), external
hard drives, or USB flash memory drives.
- Storing data on network drives such as your H: drive or departmental shares eliminates the risk of data loss should the computer be lost or stolen and ensures that that your data is backed up.
- If sensitive data must be stored on local computer hard drives, external hard drives, or flash memory drives it must be encrypted using IT Security-approved encryption methods.
- Close and lock your office door every time you leave.
- Never allow another person to use your computer account.
- Log out when you leave your computer for long periods of time and “lock” your computer every time that you leave your computer.
- Use security devices to lock down computers that are in public or otherwise unsecured spaces.
- Restrict the number of keys to your office.
- Know who accesses your office. (It may be necessary to maintain an attendance log for high security areas.)
- Use a screen-saver that requires a password to get back into your computer after the screen saver activates.
- Workstation screens should not be visible to anyone but the authorized user of secure documents.
- Keep your passwords and computer ID's a secret.
- Report suspicious looking persons or activity to the UT Police department.
- Express any concerns about physical security to your supervisor.