Secure UVic devices
Wherever possible, UVic aims to provide employees with computers or whatever devices they need for their work. These devices are purchased, owned and managed by UVic, whether they're purchased with operating, research, or grant funds. The safest way to work with UVic systems data is to use a UVic device and follow these best practices.
In cases where departments can't provide employees with a UVic computer, they're still responsible for the security of any UVic data they have access to.
What is a UVic device?
UVic devices are also called managed devices or UVic-managed devices. They're devices owned by UVic and supported by IT support staff. They're configured for many information security best practices.
UVic devices include computers, phones and tablets.
UVic devices will:
- automatically download and install regular software updates
- use Microsoft Defender for additional security
- connect securely to the UVic network and your department's online resources
- use full-disk encryption
- use your NetLink ID to sign in
Device security
UVic computers are set up for security. IT support ensures that your computer is encrypted and receiving regular updates.
To help you secure your computer, you can:
- Limit local data storage by using OneDrive, SharePoint or network storage.
- Use UVic internet on campus and a VPN connection when working off campus.
- Put your computer to sleep at the end of the day instead of powering it off. This allows scheduled maintenance tasks to keep it up to date.
- Keep your office locked when you’re out. Avoid leaving your computer unattended if you’re traveling or working off campus.
- If your computer is lost or stolen, report it as soon as possible.
If you have any questions about how to protect your UVic computer, consult with IT support.
If you have a mobile device supplied by UVic, IT support can help you secure it.
To secure your mobile device, you can:
- Keep the operating system and apps updated.
- Use UVic Wi-fi on campus and a VPN connection when working off campus.
- Use UVic OneDrive for data storage instead of iCloud or Google Drive.
- Avoid leaving your device unattended. If you don't keep it with you, keep it secured in your office.
- If your device is lost or stolen, report it as soon as possible.
If you have any questions about how to protect your UVic mobile device, consult with IT support.
Apps
Be careful when installing new apps on your mobile device. To stay secure when installing and using apps:
- Be informed. Review app privacy reports before you install anything from the app store. Read the privacy policy of any app or service you use.
- When you install a new app, always review the account privacy and security settings.
- If possible, use web apps rather than installing new software on your device.
- If you're not using an app regularly, remove its permissions or uninstall it.
- Use multi-factor authentication (MFA) on any third-party accounts you use (including Apple and Google).
- If your use of an app is part of a new or updated initiative involving the collection of personal information, contact the Privacy and Access to Information Office to complete a privacy impact assessment (PIA) before the launch of your initiative.
If you have any questions about installing apps on your UVic mobile device, consult with IT support.
International travel
If you're travelling for work, you're probably bringing at least one UVic device with you. When travelling with a UVic device:
- Leave any nonessential devices at home to reduce risk of loss, theft or damage.
- Avoid storing unnecessary data on your devices by using OneDrive. If you do need to store data locally, back it up to a UVic file storage option as often as possible.
- Use UVic's VPN connection when connecting to wireless networks.
- Use Duo MFA unless you're visiting a restricted country or region.
- Use different passphrases and PINs for your devices in case you have to disclose one.
Go to off-campus travel and safety for travel advisories and preparations that aren't related to IT.
Some countries' border control agencies retain the right to seize travellers' electronic devices and review their contents. This means their officers have the ability to stop and search people, and examine their belongings including electronic devices. Failure to unlock an electronic device may cause you to be detained or refused entry to the country.
UVic has no objection if you comply with a border control officer's request to unlock a UVic device. If they remove the device from your sight:
- change your passphrase immediately
- inform your supervisor as soon as possible
Learn more about your from the BC Civil Liberties Association (BCCLA).