Sensitive Information and Mobile Devices

The instructions in this section are based on a Galaxy S3 running OS version 4.3.  Your device’s location of items and services may vary.

Anti-malware

• Malwarebytes Anti-Malware
• Lookout Security & Antivirus

Android Device Manager

From the Mobile device:

1. Locate and open the “Google Settings” app on the device
2. Tap Android Device Manager
3. Select Allow remote lock and erase
4. Accept the Android Device Manager device administrator prompt on the device

From a computer:

1. Open the Android Device Manager in a browser and Login
2. Select the device from in the dialog box shown if you have more than one
3. Click Setup Lock & Erase
4. Accept the Android Device Manager device administrator prompt on the device

To find a lost android device login to the Android Device Manager.

Encryption

Warning: If your PIN/Password is lost while the device is powered off the device can only be recovered by a factory reset.

You must enable lock screen before your phone will allow encryption to be turned on.

Notice: The steps outlines below may change from device to device.  Recovery of a locked device is done through your Google account.

1. Open the system settings menu. This is often done by pressing the menu button the device from the home screen and selecting settings.
2. Find and Open the Security menu. On older phones it will be called Location & security
3. Select Screen Lock. On older devices it will be called Configure lock screen
4. Select either PIN or Password
5. Adjust the idle time before the screen locks
   • Open the system settings menu
   • Tap the Display or Screen option
   • Tap the timeout or sleep option
   • Select the time you are comfortable with

Once started the encryption process must not be interrupted or data loss will result.

Notice: The steps outlines below may change from device to device.

1. Find a time when you will not need your device for an hour or two.
2. Charge your device and leave it plugged in for the procedure
3. Open the system settings menu. This is often done by pressing the menu button the device from the home screen and selecting settings.
4. Find and Open the Security menu. On older phones it will be called Location & security
5. Tap Encrypt phone/tablet
6. Make sure the phone is charged, plugged in, and a PIN/Password has been set.
7. Tap Encrypt phone/tablet. Tap Encrypt phone/tablet on the next warning screen as well
8. After the process is complete reboot the phone if it did not do so itself. The encryption was successful if you are prompted to enter your PIN/Password on system boot.

Select and implement one from each section.

Anti-malware

• Lookout (antimalware, location services are free)
• McAfee Security

Location Services and Remote Wipe

1. Open Find My iPhone
2. Navigate to Settings > iCloud
3. Sign in with your Apple ID or create one if prompted
4. If the Find my option is disabled tap to enable it

Encryption

Note: Encryption is enabled on iOS when you require a passcode to access the phone.

1. Navigate to Settings > Passcode. On older devices use Settings > General
2. Tap Turn Passcode On
3. Configure the settings to match your needs
   • Adjust time between screen off and passcode lock
   • Enable/Disable  alpha-numeric password
   • Adjust access level to device while locked

Anti-malware

• Windows Security Essentials
• Malwarebytes Antimalware
  

Encryption

• For your university owned laptop and desktop, submit a request through the Information Technology Support Center to have Winmagic SecureDoc installed.

Anti-malware

• Sophos for Macs
• Avast! For Mac

Encryption

• For your university owned Mac, submit a request through the Information Technology Support Center to have encryption set up.
• For your personally owned Mac, Enable Filevault 2

If you directly process or store any Category-1 or Cateogry-1a information, you need to ensure it is protected.

Category-1 information is information that, if revealed publicly, could cause significant damage to the individual it describes and bring severe repercussions to the university. The most clear example of this is the Social Security number and its relation to identity theft.

Any smart phone, tablet, laptop, desktop, or other computer owned by an individual.

Data classification is the confidentiality of information based on how much damage could be done if that information were revealed publicly.

Any information, if exposed, that could cause damage to the person it describes. Examples include Social Security numbers, credit card information, and student grades all of which are Category I data.

Changes are being made to the university’s networks that will prevent any unsecure device from connecting to the network. We will be rolling those changes out over time and notifying employees of their requirements.

The terms confidential and private are interpreted differently by each individual and tend to create confusion as to what term indicates greater sensitivity.

The ability and process allowing a device to have a command sent remotely to it ordering the device to delete information from the device. Typically, the command must be sent so that it cannot be prevented from executing by the person currently in possession of the device. This is performed as a result of a loss or theft.

Anti-malware is software that prevents hacking programs (malware) from harming your information or covertly taking control of your device thereby exposing sensitive information.

Encryption is the process of mathematically hiding your information so that it can only be read by using the correct access, usually a user log in or special token.

You should make sure the information is available to our constituents. Some malware and hacking activity seeks to destroy or erase information.