Handling Information Safely

Controlling access to electronic information

Use your workstation’s password protection options and develop a strong password. A strong password is easy to remember but complex enough that it is secure.

• Do set an automatic screen lock and manually lock the screen when you leave your computer
• Do use password complexity criteria identified in the UNM Password Standard (cio.unm.edu/standards/docs/PasswordStandard060507r.pdf) or in FastInfo 3559, What is a valid password (unm.custhelp.com/app/answers/detail/a_id/3559/kw/password)
• Do NOT share passwords or write them down where others can access them. If you must write your passwords down, keep them under lock and key at all times!
• DO change your password regularly, for those that do not change automatically, at least every 6 months.
• Do NOT use automatic password-storage options in your web browser.

Do NOT e-mail or instant message (IM) private/non-public information. Unencrypted e-mail or IM is NOT a secure way to transfer private data.

• Do NOT e-mail or instant message (IM) private/non-public information. E-mail or IM is NOT an acceptable way to transfer private data.
• DO set up a secure, shared file server for your department.
• DO use Banner or Canvas for posting grades and use office hours to offer student feedback.
• DO contact the University Information Security & Privacy Office for encryption assistance.

Do NOT store protected information on a local portable storage device (i.e., desktop computer, laptop, flash drives, etc.) without encryption or password protection.