Article

IOT Security Working Remote Tips and Reminders

Team FSSA,

You’ve settled into your new work environment. You’ve got the VPN and two-factor connectivity requirements figured out. And the state’s use of the cloud has made working from home easier and more productive than you could have imagined. Even the dogs and the kids are cooperating. Okay, maybe it’s not been quite that smooth but you’ll get there. As you adjust, we need to ask you to keep cybersecurity at the front of your mind.  Here are a few concerns that require your attention:

Watch for phishing messages – Sound familiar?  It’s the same challenge you have when you drive to the office. Only now, it’s even more important. When you work remotely the protections we can put in place are different. Additionally, hackers are looking to leverage the COVID-19 crisis to their benefit. When you combine these two factors it adds up to more risk than usual. We’re counting on you to apply extra caution regarding phishing emails while you’re working remotely. Remember to watch for links and attachments. Also, look for the warning banner. It will still be there to remind you of the potential risk of an outside sender.

WiFi network password – Many of you will be using a wireless access point that was set up by your Internet service provider. Chances are it’s got a password so long that you have it posted somewhere on the fridge because you can’t remember it otherwise. That long password is exactly the type of protection we need for your home network (just make sure it is hidden behind some of the kids artwork if posted on the refrigerator). If, however, you set up your own WiFi network and you have left the default password in place or changed it to something like “password” or “123456”, we need you to change it. With you working from home the state can’t afford to have your wireless network hacked. When you change the password make it long and impossible to guess. Passphrases are effective for this purpose (e.g. – Don’t cancel the Indy 500; The grocery shelves are empty!).

Leave your state-provided PC on at night – IOT will be shipping updates and patches to your work devices while you are working from home. Leaving them on at night will allow updates to occur as needed. A patched machine is a more secure machine so help us keep your device's current. While ensuring your work PC/laptop is patched you might take the next opportunity to update your home devices (desktops/laptops are obvious but check your router as well) with patches.

Thank you for your attention to these items.

IOT Security