As the judiciary continues its adoption of telework, one goal to keep in mind is ensuring all work is completed securely. On the pages that follow are several key elements to consider when keeping your home office and work as safe as possible.
If you have any additional questions about teleworking safely, please contact your local help desk, Circuit IT Security Officer, or ITSO for more information.
Beware of Social Engineering
Scammers can use email, phone calls, and even text messages in their attempts to gain access to your systems and information. Be sure you know how to spot common social engineering techniques, and what to do when you see them!
Secure Your Home Network
Take the time to secure your home network, and all devices attached to it. Keeping all your devices current with patches and changing your router’s default administrator password will go a long way toward fortifying your home office!
Use Strong Passwords/Authentication
Using strong passwords and other authentication is essential to keeping your systems, accounts, and information safe from prying eyes. Given the additional risks associated with remote access, consider using passphrases and two-factor authentication for all your accounts. If passphrases are not an option, your passwords should be at least 8 characters long and complex (i.e., with a mix of uppercase and lowercase letters, numbers, and special characters). Don’t write your passwords down and change them at least every 90 days.
Restrict Work Systems to Work
The judiciary issued you devices for work. Discourage your family and significant others from using your laptop or other work devices for personal use. When not using them, secure your judiciary devices so they are not immediately accessible by anyone who should not otherwise have access.
Using a Personal Device? Use Antivirus Software
Cyber threats and criminals often use malware to gain access to systems, accounts, and information they shouldn’t have. If using a personally owned device for judiciary business, install antivirus software to keep your system free of malware. Be sure to configure this software to update automatically and to scan your system daily, so you’re always protected from the latest threats.
Using a Personal Device? Keep Your System Patched and Up-to-Date
Apply the most recent updates from software and system manufacturers so your system has the latest security protections available. This is particularly important when using your personal device for judiciary business. Just like with AV software, set your system to download and install updates automatically and never miss a single patch!
Using a Personal Device? Use Care if You Share
If you are using a family computer to telework, your entire family’s computing habits can now impact the judiciary. Be on the safe side. Delete any sensitive judiciary data from your computer at the end of each workday. Doing so helps prevent a family member’s online mistake from becoming a judiciary security incident!
Have Back-up Contact Information
When working from home, it’s best to expect the unexpected. Make sure you can contact the National Support Desk, your local help desk, and your supervisor if you lose access to your judiciary email or other judiciary resources. Also ensure you can contact the Security Operations Center with security-related concerns. Make a list for your desk and keep it somewhere where you can find it easily, or input these numbers into your phone. Make sure to include the following contacts:
If you have any additional questions about teleworking safely, please contact your local help desk, Circuit IT Security Officer, or ITSO for more information.
Beware of Social Engineering
Scammers can use email, phone calls, and even text messages in their attempts to gain access to your systems and information. Be sure you know how to spot common social engineering techniques, and what to do when you see them!
- Brochure: Social Engineering: Beware of Friendly Hackers
- Tip: GoFundMy Facebook Relief Effort!
- Tip: Something (Pointedly) Fishy in Your Inbox
Secure Your Home Network
Take the time to secure your home network, and all devices attached to it. Keeping all your devices current with patches and changing your router’s default administrator password will go a long way toward fortifying your home office!
- Brochure: Safe at Home: Big League Tips for Securing Your Home Network
- Tip: Telework: Keeping your Devices Safe and Sound
- Tip: Be Your Family’s Cybersecurity Superhero
Use Strong Passwords/Authentication
Using strong passwords and other authentication is essential to keeping your systems, accounts, and information safe from prying eyes. Given the additional risks associated with remote access, consider using passphrases and two-factor authentication for all your accounts. If passphrases are not an option, your passwords should be at least 8 characters long and complex (i.e., with a mix of uppercase and lowercase letters, numbers, and special characters). Don’t write your passwords down and change them at least every 90 days.
- Brochure: Guide to Creating and Protecting Strong Passwords
- Tip: Strong Passwords Reap Rewards
- Tip: Pass the Word—Don’t Share
- JNet: Remote Access with Two-Factor Authentication
Restrict Work Systems to Work
The judiciary issued you devices for work. Discourage your family and significant others from using your laptop or other work devices for personal use. When not using them, secure your judiciary devices so they are not immediately accessible by anyone who should not otherwise have access.
- Brochure: Guide to Best Practices for a More Secure Workspace
- Brochure: Best Practices for Laptop Security
Using a Personal Device? Use Antivirus Software
Cyber threats and criminals often use malware to gain access to systems, accounts, and information they shouldn’t have. If using a personally owned device for judiciary business, install antivirus software to keep your system free of malware. Be sure to configure this software to update automatically and to scan your system daily, so you’re always protected from the latest threats.
- CISA Tip: Understanding Anti-Virus Software
- JNet: Norton Antivirus for Home Use
Using a Personal Device? Keep Your System Patched and Up-to-Date
Apply the most recent updates from software and system manufacturers so your system has the latest security protections available. This is particularly important when using your personal device for judiciary business. Just like with AV software, set your system to download and install updates automatically and never miss a single patch!
- JNet: Enabling Windows Automatic Updates
- Apple: Security Updates
Using a Personal Device? Use Care if You Share
If you are using a family computer to telework, your entire family’s computing habits can now impact the judiciary. Be on the safe side. Delete any sensitive judiciary data from your computer at the end of each workday. Doing so helps prevent a family member’s online mistake from becoming a judiciary security incident!
Have Back-up Contact Information
When working from home, it’s best to expect the unexpected. Make sure you can contact the National Support Desk, your local help desk, and your supervisor if you lose access to your judiciary email or other judiciary resources. Also ensure you can contact the Security Operations Center with security-related concerns. Make a list for your desk and keep it somewhere where you can find it easily, or input these numbers into your phone. Make sure to include the following contacts:
- National Support Desk: (210) 536-5000
- Local Help Desk: [Your Local Help Desk Telephone Number]
- Supervisor: [Your Supervisor’s Telephone Number]
- Security Operations Center: (202) 502-4370 or mailto: [email protected]