University of California, Riverside

Security



Security Best Practices


Cyber security is a collective responsibility, and by following security “best practices”, the entire UCR community will benefit from decreased cyber risk.  The links below provide various suggestions, ideas, tips, and techniques aimed at enhancing electronic security and mitigating on-line threats.  If adopted by the entire UCR community, these best practices will help ensure a robust and reliable campus cyber environment.

Best Practices to Enhance the Security of Campus Electronic Information

  1. Install Anti-virus and Anti-malware Software.  Please make sure you have anti-virus and anti-malware software installed on your personal computer.  C&C has acquired site-licenses for these software products and they are available to the campus community via the following web site:  http://cnc.ucr.edu/security/avas.html
  2. Avoid Phishing Scams – NEVER Provide your Password to Anyone via e-mail or via any other mechanism.  No legitimate organization will ever ask you for your password via e-mail.  Please, never provide your UCR password to anyone, especially in response to an e-mail request.  As you know, AYSO is a software program that holds all of an employee’s personal information (e.g. SSN, employee benefits elections, pay stubs, W2, bank routing information, etc.), if you provide your password to anyone, they can now access AYSO on your behalf and have access to all your personal information.
  3. Only Visit Trustworthy Web Sites and Watch for Web Sites that try to Imitate Campus Resources.  Increasingly, internet scammers are attempting to “trick” campus users into using fraudulent web pages that resemble UCR web sites (often sent as links in Phishing e-mails). Please check web addresses closely and ONLY visit sites that you are absolutely sure are legitimate.  Closely examine the “from” address on all e-mails and the web addresses of sites you visit to determine authenticity.  If you’re unsure about an e-mail or web address, please contact the Helpdesk (students should mail helpdesk@student.ucr.edu and faculty & staff should e-mail helpdesk@ucr.edu or contact your departmental technical support group).
  4. Never Store Social Security Numbers or other Protected, Personal data on University Owned Computers.  There are both federal and state laws that govern how and under what circumstances Social Security Numbers (and other protected data like credit card numbers) may be stored on University owned computers.  The best practice is to NEVER store Social Security Numbers on a laptop or personal computer.  If you must store Social Security Numbers on your computing device, it must be reported as part of UCR’s annual inventory, and the system in question must be made secure.  Please note that Social Security Numbers should never be included within e-mail messages nor should Social Security Numbers ever be stored on a cloud service (e.g. Box.com, Google Drive, etc.).
  5. Ensure your Computer Does not have Software that may be used for Illegal File Sharing.  The sharing of copyrighted music, software, and movies is against federal law and should never occur on UCR’s network.  It is possible for computers to become infected with software that enables illegal file sharing, and if you suspect your computer has been compromised, please contact C&C’s Help Desk.
  6. Utilize UCRWPA or Eduroam, UCR's two preferred secure wireless networks for faculty, staff and students.  UCRWPA and Eduroam are encrypted and optimized for a fast and smart login.  For more information visit http://wireless.ucr.edu.
  7. Use a Unique Password for UCR. The password used in conjunction with a netid here at UCR should never be used elsewhere on the Internet and a netid should never be used as a username on a non-UCR site.  Hackers are smart and understand that if they compromise another service like LinkedIn or Dropbox and they run across a username that looks like first.last@ucr.edu they know instantly where this person works and that there is a good chance the compromised password from LinkedIn or Dropbox might also work at UCR.

More Information 

General Campus Information

University of California, Riverside
900 University Ave.
Riverside, CA 92521
Tel: (951) 827-1012

Department Information

Computing & Communications
Computing & Communications Bldg.

Tel: (951) 827-4741
Fax: (951) 827-4541
E-mail: helpdesk@ucr.edu

Footer