tailieunhanh - Protecting the confidentiality of Personal Data Guidance Note phần 2

Việc sử dụng máy tính xách tay, gậy USB bộ nhớ và lưu trữ di động hoặc di động khác đã tăng lên đáng kể trong số lượng cuối cùng của năm. Tương tự như vậy, việc sử dụng các thông tin liên lạc cá nhân và các thiết bị lưu trữ như điện thoại di động, PDA, vv cũng tăng lên. Các thiết bị này là những công cụ hữu ích | encrypt data on these machines. In addition strong passwords passphrases see General Procedures must be used to protect access to these machines and to encrypt decrypt the data held on them 7. Staff should be aware that it is imperative that any wireless technologies networks used when accessing the Department s systems should be encrypted to the strongest standard available. 13 Laptops and Other Mobile Storage Devices incl. Mobile Phones PDAs USB memory sticks External Hard Drives etc. The use of laptops USB memory sticks and other portable or removable storage has increased substantially in the last number of years. Likewise the use of personal communications and storage devices such as mobile phones PDAs etc. has also increased. These devices are useful tools to meet the business needs of staff. They are however highly susceptible to loss or theft. To protect the content held on these devices the following recommendations should be followed 1. All portable devices should be password-protected to prevent unauthorised use of the device and unauthorised access to information held on the device. In the case of mobile phones both a PIN and login password should be used. Manufacturer or operator-provided PIN codes must be changed from the default setting by the user on receipt of the device 2. Passwords used on these devices should be of sufficient strength to deter password cracking or guessing attacks. A password should include numbers symbols upper and lowercase letters. Password length should ideally be around 12 to 14 characters but at the very minimum 8 characters. Passwords based on repetition dictionary words letter or number sequences usernames or biographical information like names or dates must be avoided. Departments must ensure that passwords are regularly changed 3. Personal private sensitive or confidential data should not be stored on portable devices. In cases where this is unavoidable all devices containing this type of data must be encrypted. With .