Cybersecurity: best practice at UofG
Training
Information security training is mandatory for all staff. It equips you with practical skills and awareness to keep our data and community safe. Please ensure you complete it on time.
Keep yourself informed
Separate work and personal devices
Staff and affiliates should use university-issued devices for work purposes.
- These devices have built-in security protections to safeguard staff and student data
- Using managed devices helps detect and stop attacks more quickly, reducing risk to our community
Secure your devices
Lock your screen whenever you step away, even for a short time.
- Never leave laptops unattended in offices, shared spaces or public areas
- Secure your phone and tablet: information on these devices can be used to access your university work accounts
Report scams
Universities are attractive targets because we hold valuable research, personal and financial data.
- Scams are becoming more sophisticated, particularly with the rise of AI-driven techniques
- Attackers actively target students and staff at all levels to gain initial access to our systems
Allow updates
We know updates can be inconvenient and may interrupt your work; however, they are essential for keeping our information safe.
Outdated software creates security gaps that hackers can easily exploit.
Use strong passwords
Weak passwords are easy for attackers to break. Avoid reusing the same password or altering one character when prompted to update it.
- Create strong passwords using the 3-word rule (three random, unrelated words)
- Use a password manager to generate, store and manage passwords securely
The University will never ask you for your password in an email, directly or via a link.
Share work securely
- Always log in via the UofG VPN to keep your work and data secure
- Apply data sensitivity labels when sharing externally: pause and think about what information you are sharing
- Review and manage viewing and editing permissions to ensure access is appropriate and limited to those you are sharing it with
Travel securely
Register all work-related travel through TRICAP and follow any guidance from the Information Security team.
- Keep your device physically secure when travelling
- Always use the Virtual Private Network (VPN) to protect UofG data when working remotely
