• If you don't need it, don't travel with it.
  • Bring only the devices (incl. Laptops, smartphones, removable storage, etc.) you need and minimize the amount of data you carry on your devices. Loaner computers may also be available; consult your technical support staff to see if this is an option.
  • Only take information that you need. If you must take any information, be sure to back it up and leave the backed-up data here.
  • Make sure sensitive information is not saved on your device. (This includes but is not limited to: account numbers, social security numbers, health records, human subject information, and/or other protected information.)
  • Clear your web browsing history and similar stored information.
  • If you need access to University data while traveling, consider storing your documents on a University-provided, cloud storage folder that can be accessed remotely, such as OneDrive (https://www.umass.edu/it/services/onedrive). This protects the data from loss and theft of devices and provides cloud-based backup if your devices get damaged, corrupted, or simply "crash."
• Confirm that your device operating system and installed software are up to date.
  • Consult your technical support staff to review options for device encryption. Some foreign countries restrict the use of imported encryption, please research the laws of your destination country.
• Download and set up device managers
  • Install software like Find my iPhone/iPad/Mac and Find My Device (for Android) to locate your device if lost or stolen and erase it remotely if needed.

• Use an alternate login/email account
  • Log in to a limited alternate/subsidiary account to access IT services and university data (like email and OneDrive) during your trip. Using an alternate account that has limited access to campus information can limit your exposure in the unlikely event of an account compromise.
• If your data is needed while traveling, store your data on a university-provided, cloud storage folder that can be accessed remotely (such as OneDrive) from your alternate login account.
• Use a loaner laptop
  • Sign out a loaner laptop from UMass Amherst IT. These laptops are designed to be used with minimum software installs and appropriate security controls.
  • Loaner Laptop request form

Device Configuration Best Practices

• Only necessary software applications should be installed and used.
  • Download software and applications from trusted sources.
  • If it is believed that access is needed to configure your device on the go, such as installing additional software or making minor configuration changes, be sure to check with your IT representative for appropriate options
• Ensure strong passwords are configured on devices to help protect them.
• Enable two-step (multi-factor) authentication on your UMass accounts
• Ensure devices and the data are encrypted.

• Do not leave devices unattended or unsecured
  • Do not use untrusted portable drives or other untrusted accessories
• Use Secure Internet Connections
  • Connect only to trusted wireless networks
    • Uncheck "auto-join" and be sure to "forget" or log out of networks you aren't using. Consider connecting to the Internet through your phone or personal Wi-Fi hotspot.
  • Disable your device's wireless connection and power off when not in use
  • Use the UMass Amherst VPN service when connecting to authorized UMass resources
• Report an IT Security Incident to itprotect@umass.edu if your device is lost, stolen, or you suspect it may have been hacked or compromised.
• Sign out of your laptop and laptop programs (including email, file storage, social media accounts) prior to passing through a security checkpoint and when you are finished using them.

• Be aware of any unusual behavior on your devices
  • Tip: Review any notifications from security software on your device
• If you think your device may be compromised, change your passwords and contact IT support.
• Reset any e-mail automatic replies or voicemail greetings
  • If you previously set an "Out of Office" automatic reply, remember to disable it once you're regularly checking e-mail again.
  • If you previously set an "alternative greeting" on your voicemail box, remember to disable it or switch to your default greeting once you're regularly checking voicemail again.
• Perform a full virus-scan of your computer
  • Upon your return, perform a full virus-scan of your computer, particularly before exporting any data from your laptop.

• Devices, such as computers, tablets, and cell phones, should be wiped upon return from travel.
• Reset Credentials: Change passwords for all accounts used during the trip. If a subsidiary account was issued for the purpose of the trip, this account should be deactivated.