Work from Home IT Security Guidelines

Best Practices When Working From Home

When working from home, it is important to remember to maintain safe cyber security practices for protecting University data and resources. Below are important guidelines to follow while working from home.

What to do before you begin working from home

• Ensure that you have access to your files. Utilize OneDrive, departmental file shares, etc.
• Leave your office computer turned on and logged out in case you need to access it remotely.
• If you believe you may need to connect to your office computer, we recommend you test your ability to connect now so you know it works when you need it.
• If you need to change your password, use the online password tool.
• Contact the IT ServiceDesk for additional support by phone: 281-283-2828 or by email: supportcenter@uhcl.edu.

Working from home using a university owned device

• Connect to the University network using VPN. Instructions on how to setup and use VPN can be found on the VPN and Remote Desktop page. (This is not necessary if only connecting to publicly available websites.)
• Run a full virus scan on your computer once a week to detect any problems.
• Report any suspicious activity on your computer to security@uhcl.edu.
• Avoid giving others physical access to university equipment.
• Level 1 data handling and protection MUST comply with SAM 07.A.08.
• Logout before you walk away from your computer.

If using a personally owned device

• Ensure you have an anti‐virus/anti‐malware software installed and running on your computer. If you are using Windows 10 or Windows 11, a free anti‐virus is built in. Avast Free Mac Security is an option available for Mac users and has received good reviews.
• Run a full virus scan on your computer once a week to detect any problems. Report any suspicious activity on your computer to security@uhcl.edu.
• Do NOT store Level 1 data on your personal device. Level 1 data handling and protection MUST comply with SAM 07.A.08.
• If you are using University Enterprise systems such as PeopleSoft, DO NOT download data onto your personal device. Enterprise system data needs to remain in the enterprise system.
• Logout of University systems after completing your work. Do not remain logged in to university systems on your personal device.
• If you perform any work or create any work product that is considered a university record, it is your responsibility to move the ‘University record’ off your personal device and store it on a University owned device or system as soon as possible.

Office 365 (O365) Login: Access to Microsoft Outlook, Word, PowerPoint, Excel, One Drive, SharePoint, etc.