1. TECHNOLOGY GUIDE THREE Protecting Your Information Assets

2. TECHNOLOGY GUIDE OUTLINE TG3.1 Introduction TG3.2 Behavioral Actions to Protect Your Information Assets TG3.3 Computer-based Actions to Protect Your Information Assets

3. LEARNING OBJECTIVES Identify the various behavioral actions you can take to protect your information assets. Identify the various computer-based actions you can take to protect your information assets.

4. Behavioral Actions Do not provide personal information to strangers in any format. Protect your social security number. Use credit cards with your picture on them. Use virtual credit cards. Know your credit card billing cycles.

5. Behavioral Actions (continued) Limit use of debit cards. Do not use a personal mailbox at home or at an apartment. Use a cross-cut (confetti) shredder. Sign up with a company that provides proactive protection of your personal information.

6. Computer-Based Actions Never open unrequested attachments to e-mail files, even those from people you know and trust. Never open attachments or Web links in e-mails from people you do not know. Never accept files transferred to you during Internet chat or instant messaging sessions. Never download any files or software over the Internet from a Web site that you do not know.

7. Computer-Based Actions (continued) Never download files or software that you have not requested. Test your system. Run free malware scans on your computer. Have an anti-malware product on your computer and use it (ideally at least once per week). Have a firewall on your computer.

8. Computer-Based Actions (continued) Have an antispyware product on your computer. Have a rootkit detection product on your computer. Have a monitoring software on your computer. Have content filtering software on your computer. Have antispam software on your computer.

9. Computer-Based Actions (continued) Have proactive intrusion detection and prevention software on your computer. Manage patches. Use a browser other than Internet Explorer. Travel with a “sterile” laptop or no laptop. Use two-factor authentication. Use encryption.

10. Computer-Based Actions (continued) Use laptop tracing tools or device reset/remote kill tools. Turn off peer-to-peer (P2P) file sharing. Look for new and unusual files. Detect fake Web sites. Use strong passwords. Surf the Web anonymously. E-mail anonymously.

11. Computer-Based Actions (continued) Adjust privacy settings on your computer. Erase your Google search history. Personal disaster preparation: backup, backup, backup!

12. Wireless Security Hide your Service Set Identifier (SSID). Use encryption. Filter out media access control (MAC) addresses. Limit Internet Protocol (IP) addresses. Sniff out intruders. Change the default administrator password on your wireless router to something not easily guessed.

13. Wireless Security (continued) Use virtual private networking (VPN) technology to connect to your organization’s network. Use Remote Desktop to connect to a computer that is running at your home. Configure windows firewall to be “on with no exceptions.”

14. Wireless Security (continued) Only use Web sites that use Secure Sockets Layer (SSL) for any financial or personal transactions (discussed in Chapter 3). Use wireless security programs.