{"id":930,"date":"2020-06-23T10:47:29","date_gmt":"2020-06-23T20:47:29","guid":{"rendered":"https:\/\/www.hawaii.edu\/testinfosec\/?page_id=930"},"modified":"2021-11-15T12:05:50","modified_gmt":"2021-11-15T22:05:50","slug":"working-remotely-during-an-emergency-for-it-staff","status":"publish","type":"page","link":"https:\/\/www.hawaii.edu\/infosec\/working-remotely-during-an-emergency-for-it-staff\/","title":{"rendered":"For IT Staff: Working Remotely during an Emergency"},"content":{"rendered":"<p> Last Updated: 2020-03-20-17:16 <\/p>\n<h2>Before Leaving the Office<\/h2>\n<ul>\n<li>Review security policy, incident response, and business continuity plans with staff<\/li>\n<li>Identify &#8220;backup&#8221; staff \u2014 Determine how knowledge\/procedures\/files will be shared with backup staff in case of emergency<\/li>\n<li>Setup primary\/alternate\/formal\/informal communication methods with staff<\/li>\n<li>Setup call forwarding and\/or provide instructions on how staff can retrieve voice messages\n<ul>\n<li>\n\t\t\tTo Activate Call Forward:<\/p>\n<ul>\n<li>With your phone on hook, press Forward at the bottom of your display on your phone.<\/li>\n<li>Enter the number to forward to:  9+7 digit number for local numbers or 91+ 10 digit number for mainland numbers<\/li>\n<li>Press Forward to activate<\/li>\n<\/ul>\n<\/li>\n<li>\n\t\t\tTo Deactivate Call Forward:<\/p>\n<ul>\n<li>With your phone on hook, press Forward<\/li>\n<li>Press Cancel<\/li>\n<\/ul>\n<p>\t\t\tIf you have any questions or concerns, you can call us at 808-956-6033 or by email: <a href=\"mailto:telecom@hawaii.edu\">telecom@hawaii.edu<\/a>.\n\t\t<\/li>\n<\/ul>\n<\/li>\n<li>For DUO, if currently using an office phone as a registered device, ensure that you have an alternate device\/method setup for authorization such as a list of passcodes, or another non-work phone number <\/li>\n<li>If public communication\/collaboration methods are used (e.g. team chat, Slack, etc.), don&#8217;t use for sensitive\/personnel matters<\/li>\n<li>Setup a single storage location (e.g. Google Team Drive) as a department repository for non-sensitive information<\/li>\n<li>Do not use unapproved cloud storage, collaboration, remote access, and file sharing sites; be wary of \u201cfree\u201d offers; no contract w\/ company; ensure data will be securely deleted when \u201cfree\u201d period is over<\/li>\n<li>Postpone non-critical visits, repairs, maintenance<\/li>\n<li>Unmount shared folders and external hard drives<\/li>\n<li>Secure all materials with sensitive information; hard drives\/flash drives\/paper documents, etc.<\/li>\n<li>Modify firewall rules to block unneeded network services<\/li>\n<li><strong>DO NOT WHITELIST Â鶹´«Ã½VPN<\/strong> on departmental firewalls if at all possible!<\/li>\n<li>Disable unneeded network services on servers<\/li>\n<li>Turn off unneeded desktop computers, printers, servers (e.g. print, file, FTP, etc); leaving a desktop computer on for RDP access is <strong>NOT RECOMMENDED<\/strong> unless absolutely necessary; any publicly-accessible system (has a public IP address) will be vulnerable to attacks and if compromised, no one will be there to notice or disable\/remediate<\/li>\n<li>Test remote connections (e.g. Â鶹´«Ã½VPN)<\/li>\n<li>Patch devices and update AV on jump boxes <\/li>\n<li>Consider enabling auto-update on servers, CMS, etc<\/li>\n<\/ul>\n<p><\/p>\n<h2>At Home<\/h2>\n<p><strong>Goal: Ensure work content is always protected<\/strong><\/p>\n<p>See: <a href=\"https:\/\/www.hawaii.edu\/infosec\/working-remotely-during-an-emergency\/#work-remotely\">https:\/\/www.hawaii.edu\/infosec\/working-remotely-during-an-emergency\/#work-remotely<\/a><\/p>\n<p><\/p>\n<h2>Upon Return to the Office<\/h2>\n<p><strong>Goal: Verify security is in-place before resuming operations<\/strong><\/p>\n<ul>\n<li>Check an already-online computer for signs of ransomware\/compromise before turning on other computers<\/li>\n<li>Patch workstations and update AV before checking email and browsing the Internet<\/li>\n<li>Update servers, CMS, plugins, etc before opening up firewall rules<\/li>\n<li>Disable unneeded remote connections<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Last Updated: 2020-03-20-17:16 Before Leaving the Office Review security policy, incident response, and business continuity plans with staff Identify &#8220;backup&#8221; staff \u2014 Determine how knowledge\/procedures\/files will be shared with backup staff in case of emergency Setup primary\/alternate\/formal\/informal communication methods with &hellip; <\/p>\n","protected":false},"author":82,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"page-onecolumn.php","meta":{"footnotes":""},"class_list":["post-930","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.hawaii.edu\/infosec\/wp-json\/wp\/v2\/pages\/930","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hawaii.edu\/infosec\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.hawaii.edu\/infosec\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.hawaii.edu\/infosec\/wp-json\/wp\/v2\/users\/82"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hawaii.edu\/infosec\/wp-json\/wp\/v2\/comments?post=930"}],"version-history":[{"count":3,"href":"https:\/\/www.hawaii.edu\/infosec\/wp-json\/wp\/v2\/pages\/930\/revisions"}],"predecessor-version":[{"id":1596,"href":"https:\/\/www.hawaii.edu\/infosec\/wp-json\/wp\/v2\/pages\/930\/revisions\/1596"}],"wp:attachment":[{"href":"https:\/\/www.hawaii.edu\/infosec\/wp-json\/wp\/v2\/media?parent=930"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}