Hybrid and remote work security best practices

Overview

The following are security guidelines for those working at least partly off campus. For more information about technology and hybrid/remote work, see the article: Get started with hybrid and remote work.

 General security agreement

Employees agree to protect college-owned equipment and information from unauthorized or accidental access, use, modification, destruction or disclosure and will report any breaches immediately to their supervisor and the appropriate College entity.

 Your work computer

Employees should use approved, college-issued LITS-managed computers when conducting MHC work (both on and off campus).

Security-Minded Device Settings:

Note that LITS configures your MHC computer to comply with these settings.

• Computer screen lock: A screen lock prevents unauthorized access to your device. Screens should be set to lock and require a password after a short period of inactivity. If walking away from your computer, even for a few minutes, it is best to lock your screen. To lock your screen manually on Windows, use the key combination Windows + L. To lock on MacOS, use Command + Control + Q. 
• Security updates: Make sure to regularly install operating system patches, browser updates, and application patches, (e.g.: Zoom). 
• Operating Systems: Only use a computer running an operating system that is currently supported by the vendor and recommended by LITS: Windows 10 or MacOS 12 and later.
• External Media: To protect MHC data and adhere to information security best practices, use of external media (such as USB flash drives or external hard drives) will be restricted by default on machines that will be used for remote work. Exceptions will be handled on a case-by-case basis.

 Home internet security

Your home router should have the latest firmware updates installed and the default router password should be changed. The wireless security should also be configured using WPA2 or WPA3. LITS recommends working with your internet service provider to ensure these recommendations are met.

 VPN use

Some campus systems (ex. MHCDrive, Avaya Softphone, Colleague etc) require that you be connected to the campus network. When you’re working remotely that means you’ll need to connect to the MHC VPN. 

More information about when the VPN is required and/or recommended.

 Secure data handling

Read and adhere to all MHC IT and Information Security Policies, including but not limited to the:

• Data Classification policy 
• Data handling procedures
• Acceptable Use of Information Technology policy