SLAC Computer Security		Search SLAC
SLAC Home | Computing Home | Computing Outages | Help

Cyber Security Awareness Month

These tips are part of a month long effort to distribute useful computer security information to the SLAC community.

Day 26 - Safe File Swapping        

Some good suggestions from Internet Storm Center: The Internet has provided us with a convenient method to share information with each other and one thing we all do is to move files around.  Whether they be documents attached to emails, music, movies or programs we install, it is all about files, files, files.  So how do you safely transfer files from one location to another?  We've had plenty of examples over the last year or so on what not to do, especially with backup tapes and credit card numbers.  So we need some tips on what people should do or should not do.  Do: Have a policy on how information can be exchanged between organizations Encrypt sensitive information on backups, removable media or in emails Use SFTP (secure FTP) or SCP (secure copy) to transfer files Set up a secure file exchange facility within the corporate infrastructure to securely exchange files with others.Use secure thumb drives. They don't cost that much more. Use strong passwords. Store the password and data separately. When sending data by courier make sure they are trust worthy, we have had customers send data that just never made it to us. Password protect all storage devices, including cell phones. They can hold a lot of data now a days.  Don't: Allow services such as the free file transferring facilities to be used by staff. Put the information on a CD and then leave it in the kiosk computer at the airport. Don't e-mail the password with the data.