As part of our Cyber Security awareness campaign, we’re covering a new and important topic each month to help boost your knowledge and keep you and the University safe and secure.
This month, we change tack to explore the risks from criminals who exploit gaps in physical security to steal devices and data.
Why is physical security important to keep your data safe?
Phishing, spyware, malicious apps, ransomware and more – with all these threats to watch out for online, it’s easy to forget that physical security is just as important to keep systems and data safe.
So, what are the biggest physical security threats to our data to watch out for, and what can we do to mitigate them?
- ‘Tailgating’ or ‘piggybacking’ – when entering a secure area an unauthorised person could easily come in directly behind you without their own access card – you should never use your own card to give someone else access to a secure building.
- Portable devices left unsecured – whether you’re in the office or working off campus it’s important to keep portable devices locked away securely when you’re not using them – leaving them unsecured and visible makes it significantly easier for a criminal to steal your device and get access to your data.
- Leaving your computer unlocked – your computer is password protected for a reason. Always lock your computer screen whenever you leave it, even if you’re in a secure office or only going to be away for a short time.
- Writing your passwords down where others can find them – a simple mistake to make but one that could give a criminal an easy way into your device and data. It’s a good idea to use a password management tool if you need a secure way to remember your passwords.
- Leaving sensitive documents lying around or on the printer is never a good idea – make sure they are always filed away securely when you’re not using them.
Case study – underground phone snatcher
A 2024 BBC article sets out the all-too-common story of a traveller on the London underground having his phone snatched. The unfortunate victim explains his shock two days after the crime at finding that the criminals had used his stolen to phone to drain £21,000 from his bank accounts, including a £7,000 loan taken out in his name.
"It used to be people stole a phone so they could sell on a phone," he told the BBC. "Now it seems they are stealing phones so they can get into all of your data and take money."
Source: BBC
How to learn more
Each month, we’re releasing a matching bitesize training via Proofpoint, our online learning platform, which is emailed to you. This month’s training will arrive in your inbox on Tuesday 18 February.