By Clay Taylor
OCIO: Endpoint Security Team
The OCIO's Endpoint Security Team asks that you take a few minutes to go through the checklist below to make sure that your computer is secure and the information stored on your computer, tablet or smartphone is protected:
1. Anti-malware software
Whether or not you are using a Mac or a Windows PC, you need to have anti-malware (anti-virus) software installed.
- For Windows PCs, MUSC provides Microsoft's System Center Endpoint Protection (SCEP 2012). You should have it set to run a quick scan at a minimum of once per week and a full scan once per month. Visit www.musc.edu/est for download info.
- For Macs, MUSC provides Microsoft System Center Endpoint Protection for Mac (SCEP for Mac). The number of Macs with malware compromises has been growing exponentially over the past year. In the past, Macs were not frequently targeted by malware, but this is no longer true. Visit www.musc.edu/est.
2. Secunia patch management
- For Windows PCs, MUSC provides Secunia's personal software inspector. This software makes a list of all software installed on your computer, then checks weekly to make sure that your software is fully up to date. It is very simple to use, and patched systems are compromised less often than non-patched systems on our network. Visit www.musc.edu/est for download information.
- For Macs, it is imperative that you install updates whenever they are available. Apple now packages third-party updates, like Java, with its standard system updates. Many Mac exploits and vulnerabilities are a result of Java flaws that can easily be patched. If you are not sure if your Mac is up to date, click on the Apple menu, then choose Software Update.
- If you have an unavoidable business need to store any type of patient data or sensitive information—whether in email, PDFs, scanned files, Word documents, voicemails, or any other means—then you need to install encryption software on your laptop, desktop or USB hard drive. Encrypting your computer or hard drives makes it almost impossible for intruders to access your data in the event that your laptop or hard drive is lost or stolen. MUSC provides encryption software for Windows PCs, Macs, Linux PCs, and external hard drives. Instructions on how to encrypt your drives can be found at www.musc.edu/est.
4. Cloud storage services
- You should never store sensitive or patient information on unauthorized third-party storage services like Dropbox or iCloud. Call the OCIO-IS Help Desk at 792–9700 if you need information on approved mechanisms for sharing or transferring information.
5. Smart phones and tablets
- You should always enable passcode protection on your smartphone. For iOS and Android, the only way to encrypt your email is to have a password enabled on your smartphone. If you need help enabling passcode protection on your smartphone or tablet, please contact the OCIO-IS Help Desk at 792–9700.
- If your smartphone is lost or stolen, you should immediately contact the help desk at 792–9700 if your MUSC email account was set up on your phone.
If you have questions or comments regarding computer and smartphone security, send an email to firstname.lastname@example.org.
Friday, Nov. 2, 2012