Dear Faculty and Staff:

'Tis the season! This is the perfect time of year for cybercriminals to take advantage of unsuspecting online shoppers. When heading out to the grocery store or local mall, it's habit to grab your reusable bags, lock the car, and make sure you've safely put away your credit card or cash before heading home with the day's purchases. Similar precautions need to be taken when you're shopping online from the comfort of your own home. If you make these simple precautions regular online shopping habits, you'll be protecting your purchases and personal information.

The National Cyber Security Alliance recommends following these basic steps so you'll be ready to cybershop safely and securely.

• Lock down your login. Remember to use a strong and unique password for each account. Password reuse for multiple accounts is one of the most commons ways accounts are hijacked. A strong password is at least 9 characters long, containing a mix of letters, numbers, and symbols.
  One of the most critical things you can do in preparation for the online shopping season is to fortify your online accounts by enabling two-step verification. Two-step verification provides an extra layer of security beyond your username and password to protect against account hijacking. Many online services, including email and social networks, offer this free extra security protection to help ensure it’s actually you trying to access your account – not just someone who stole or guessed your password.
• Keep clean machines. Before searching for that perfect gift, be sure that all web-connected devices—including PCs, mobile phones, smartphones, and tablets—are free from malware and infections by running only the most current versions of software and apps.
• Shop reliable websites online. Use the sites of retailers you trust. If it sounds too good to be true, it probably is!
• Conduct research. When using a new website for your holiday purchases read reviews and see if other customers have had a positive or negative experience with the site.
• Personal information is like money: value it and protect it. When making a purchase online, be alert to the kinds of information being collected to complete the transaction. Make sure you think it is necessary for the vendor to request that information. Remember that you only need to fill out required fields at checkout.
• Get savvy about Wi-Fi hotspots. If you are out and about, limit the type of business you conduct over open public Wi-Fi connections, including logging in to key accounts, such as e-mail and banking. Adjust the security settings on your device to limit who can access your phone. If you must use open Wi-Fi connections, connect to a virtual private network (VPN) first. Alternatively, wait until you get home, or use your cell phone data connection, rather than public wifi.
• Check the address bar. Look for the green lock icon and https:// in the URL before using your credit card online.

Sincerely,
Orlando Leon, Chief Information Officer