IT Security guides
Guides and tricks helping staff and students to stay safe
- Passwords are personal. Period! Never let anybody else kog in t your accounts. Hanken's IT personnel never asks for your password. Persons who ask for the password claiming to be from IT support, the police or any other authority, are certainly scammers.
- Be alert to your surroundings when logging in. Is there anyone trying to peek over your shoulder? Play safe and change your password if you suspect that it might have been compromised this way.
- Use a sentence to create your own system for remembering passwords. The strong password "5PiIsMoTh2El!" sounds like gibberish, but only you know that it stands for "Five Pigs Is More Than two Elephants!", whish has a meaning and is a lot easier to remember. Your password can also be a full sentence like "Did I pass the 1st exam?"
- Never write your passwords on paper.
- Never use your Hanken password when signing up at other services (but it's OK to use your Hanken mail address as user ID).
- Use a password manager like KeePass 2, http://keepass.info/download.html, if you need to remember multiple strong passwords.
- Never open suspect attachments that arrive unexpectedly. PDF and MS Word documents can also contain malware (viruses). Contact firstname.lastname@example.org if you need help determining if something is legit or not.
- Learn how to recognize phishing. Ask email@example.com if you are unsure about a message you receive.
- Make sure you are mailing the right recipient. Outlook tries to help by suggesting recipients when you start typing, but the first suggestion may be wrong.
- E-mail is not suitable for confidential issues, like sensitive personal data or passwords. Check Handling data on different security levels.pdf for more info about what e-mail can be used for. Use Deltagon instead for sensitive issues.
- Use of the Hanken e-mail for private issues is not recommended. Create a private mail at gmail.com or outlook.com if needed.
- Return mails that are sent to you by mistake, or forward them to the correct recipient, if your are certain about whom the mail belongs to. Remember that messages you see accidentally are covered by professional confidentiality.
- The personnel is not allowed to redirect the Hanken e-mail to another address.
- Your mail must be handled properly during vacations and other types of absence.
- Do not reply to junk mail (spam) and be selective about how you share your address online.
- Be restrictive when sending less important messages, like Christmas greetings, and do not forward chain letters.
- Your mailbox will be suspended when you quit. Transfer work-realted mails to the appropriate employee and retrieve/delete your personal messages.