# data[].attributes.body
The norms of appropriate behaviors regarding technology use.

# data[].attributes.body
Tips for kids and teens because they are often the ones who fall victim to the internet.

# data[].attributes.attachment_link.title
Safe Web Surfing: Top Tips for Kids and Teens Online

# data[].attributes.body
Make sure the websites you are getting your information or buying your stuffs from are safe and secure.

# data[].attributes.body
Before you post!

# data[].attributes.body
Be aware of viruses that can spread throughout your computer. Computer viruses are often spread through email attachments or other attachments such as instant messages.

# data[].attributes.body
There are resources out there to help you stay safe online and be aware of how dangerous the internet is.

# data[].attributes.body
Kids are more vulnerable and at risk of revealing too much online. They should be more aware and understand how to use the internet safely.

# data[].attributes.body
This website tells you how to be well informed and how to protect yourself. It also provides videos about internet safety.

# data[].attributes.body
These are some safe computing tips for those who want to keep their computer's security tight and safe.

# data[].attributes.attachment_link.readable_text
Working, teaching, and learning away from the MIT campus poses new risks to securing information. IS&T recommends that community members follow these best practices when engaging in activities remotely to help reduce the chance of the information and data you handle at MIT being compromised.

Protect your devices
Make sure your devices are running newer operating systems supported by the vendor (e.g., Windows 10, macOS Mojave 10.14, or newer) and that all updates have been applied.

Protect your information
When exchanging high risk (i.e. sensitive or personal) information over email (e.g. birth certificates, loan applications), make sure to protect it by encrypting files before sharing.

Secure your home WiFi
Make sure your home router's firmware is up-to date, that you have changed the default password to something strong, and that you have enabled WPA2 encryption for your home WiFi network.

Practice safe video conferencing
Use MIT-approved and licensed enterprise video conferencing tools, such as Zoom, Microsoft Teams, and Webex, which offer protections for your security and privacy, and follow suggested best security practices.

Be aware of COVID-19 related scams
There has been an uptick in malicious attacks to take advantage of the COVID-19 pandemic. Be wary, in particular, of phishing attacks and also of scams that try to trick you into making donations to fraudulent organizations or causes or revealing sensitive information. Protect yourself and your information by using caution when opening emails and attachments.

IS&T is committed to strengthening the security of MIT's infrastructure and information.
Even computers that don't appear to have any valuable information can be attractive targets for attacks. Compromised computers and other devices can be used as a foothold allowing attackers to spread through the network. Networked devices in MIT's public IP space are constantly under attack from devices across the globe. IS&T provides a variety of security services and software to protect the MIT community.

Protect yourself

Take steps to protect your computing and the information you handle at MIT.

Enable automatic updates for your operating systems and software to protect against the latest security threats.

Install Sophos Anti-Virus and CrowdStrike Falcon. Sophos protects your computer against known viruses, worms, and malware. CrowdStrike provides advanced protection against emerging threats, using machine learning to detect patterns commonly seen in attacks.

Use a password manager such as LastPass to generate and protect strong, unique passwords.

Back up your computers using CrashPlan. This cloud-based backup solution makes it easy to recover data from computers that have been lost, stolen, or damaged by malware.

If you handle personally identifiable information (PII), install Spirion to help you detect and securely encrypt or delete files with sensitive information.

Beware of phishing and other scams

Phishing emails and email scams continue to be an effective way for scammers to steal credentials, install malware, or extort cryptocurrency. Many of these emails are targeted to a specific department or lab, and may appear to come from someone you know or do business with.

If an email looks suspicious, report it to phishing@mit.edu by forwarding the email as an attachment. The IS&T Security team will take steps to protect the community.

Learn more

The Information Protection @ MIT website provides access to policies and guidance on safeguarding information at the Institute. The Awareness I: IT Security and Awareness II: IT Security courses are available in the Atlas Learning Center.

Report an IT security incident

It's important to report any IT security incident as soon as you are aware of it so the Security team can take proper steps to limit the impact and extent of loss, investigate, protect other members of the MIT community, and meet any regulatory or legal requirements.

If you believe a breach of MIT information occurred, immediately report the IT security incident by sending email to security@mit.edu or by submitting the form below. The IS&T Security team will contact you to evaluate the situation and determine the next best step. If necessary, they will assemble the Data Incident Response Team. You should not address these situations on your own, as that may corrupt forensic information needed to determine the scope of the issue and the risks to MIT.

# data[].attributes.attachment_link.description
Take steps to ensure that you are secure when working remotely Working, teaching, and learning away from the MIT campus poses new risks to securing information. IS&T recommends that community members follow these best practices when engaging in activities remotely to help reduce the chance of the information and data you handle at MIT being compromised.