Information Security
| Table of Contents | ||||
|---|---|---|---|---|
|
Objective
These instructions are a general guide to Information Security basics for all Metropolia personnel and students. Its content follows the existing legislations and guidelines stated by the Ministry of Finance.
...
- Do not trust in all the emails you receive, especially if the sender is unknown.
- Do not send sensitive information via internet without encryption.
- Save your important files onto net drives.
- Do not under any circumstances, disclose your user name or password to anyone.
- Password should be Recommended password length is 15 characters long (at least 8 characters long), use case-sensitive and include numbers., numbers and special characters such as: =)?!#
- Lock your computer whenever you leave the workstation.
- Do not install your own programs.
- Do not open doors to strangers.
- Agree with your supervisor about the usage of files and email accounts, if you plan on being away for a long time.
- It is forbidden to keep classroom doors open with obstacles. Most doors have an electronic lock that monitors access to the classroom.
- Follow the announcements of the IT Services.
...
- The internet connection is to be used for work and/or study related purposes, as agreed with the employer.
- The internet connection is secured by a firewall. Data traffic and server logs are monitored to ensure that no violation occurs according to the law of Protection of Privacy, systems and their security settings are secure, services are not misused and for technical development and troubleshooting.
- Do not download from the internet non-work related programs or materials.
- If you suspect that a system is hacked or any kind of security breach (not only internet related), contact IT services immediately.
- It is forbidden to use without permission the employer’s credit card for online purchases.
- Keep in mind that you are a representative of your employer, whenever you access the internet. Your computer’s IP address that is transmitted onto the internet is registered to Metropolia.
- Clean up your browser’s cookies frequently.
- Use of the following applications is not permitted due to security risks:
- Music and video download programs such as Napster, KaZaA, DC or similar.
- Downloaded screensavers that consume a workstation’s resources, such as SETI@home (Search for Extra Terrestrial Intelligence) or similar @home applications.
- Programs that bypass security protocols and services, such as decryption breaking software.
...
- Do not panic
- Do not switch off the computer.
- Write down what happened, what did you do and read on the screen (error or warning message).
- Contact the IT service and/or a network security employee.HelpDesk via phone 09 7424 5000
- Do as instructed.
- Describe as accurately as possible what you were doing when the computer started behaving strangely.
...
- General Policy on the Use of Information Systems
- Email regulation (Not translated yet) https://tietohallinto.metropolia.fi/pages/viewpage.action?pageId=8552469
- Ministry of Finance and VAHTI instructions.
- Other Information Security organizations including the Finnish Communications Regulatory Authority (Viestintävirasto), The Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) and The National Archives Service of Finland (Arkistolaitos).
- IT service, your supervisor, your colleagues
Governing Laws
- Personal Data Act protection act (5231050/19992018)
- Personal data processing
- Registration (Winha, payroll office, )
- Protection of Privacy in Electronic Communications Act (516/2004Information Society Code act (917/2014)
- Metropolia is an organization that stores in its data network confidential information and messages of its users.
- Identification data may only be processed to the extent necessary for providing and using a network service, communications service or value added service and for the purpose of ensuring information security.
- Has the right to block junk mail and remove malicious software that may endanger its services.
- To ensure safe communication, it must not compromise any more than necessary, the freedom of speech or the security of private and confidential messages.
...