Home → IT → Cyber Security Tips and Procedures → Cyber Security Tips and Procedures Handout
1.1. Cyber Security Tips and Procedures Handout
Cyber Security Tips and Procedures
Provided by the LCLS IT Department
Help Desk Phone #: (570) 348-3000 ext. 5021
Help Desk Email: lclsithelp@albright.org
IT Department Staff Members:
Jess Serrenti (manager): direct number is (570) 795-4332 or ext. 3050.
Brian Stone
Ernie Reich
Cellphone Security (when used for work)
· If you use either a personal or work cellphone for work-related tasks, keep in mind the same tips as below for email security and browsing on the internet.
· Be careful of push notifications used for authentication. These notifications only ask the user to hit “yes” or “no” on the phone to provide authentication.
· The LCLS IT Department only allows codes to be sent to a user’s cellphone either by text or the Microsoft Authenticator app that must be inputted by the user when signing in.
Email Security
· If you suspect an email is spam, do not click on any links or attachments in the message.
o Mark the email as spam and block the email address by right clicking on the message in Outlook.
o Notify the IT Department by taking a screenshot of the email. Do not forward the email to the IT Help Desk.
· Staff Microsoft passwords are changed every 6 months to help prevent accounts from being hacked or stolen. Please do not email the IT Department with your new password. Call the IT Help Desk or send your new password in a sealed envelope to: Jess Serrenti, IT Department.
General Tips
· When in doubt, call IT first. We much rather you call us if you suspect any security issues or have a question about any of the software we use. False alarms are better than real incidents.
Microsoft OneDrive Security
· We utilize OneDrive to make sharing and editing files more readily available for staff who need to work from home or on the go. File sharing is allowed but has some restrictions.
· When needed, use the timeframe option when file sharing to prevent access after a certain period.
· You can also share specific files only with people you pick (within the LCLS organization).
Online Security
· Be careful what links you are clicking on when doing general searches in any browser (Chrome, Microsoft Edge, or Firefox). These links could lead to Malware or viruses being downloaded onto the computer.
· If there is an app or program you need installed on a computer, contact the IT Department. We can help make sure the program is trusted and secure.
· Be careful of using Autofill for passwords when the staff computer is utilized by several staff members at one time. This is more common for the staff circulation desk computers. The IT Department recommends not using autofill or password manager on these computers.
Public Computer Security
· The IT Department uses the following software to protect and prevent information from being stolen on public computers:
o DeepFreeze: creates a “frozen” image of the computer. Every computer stays in a “frozen” state so that patron data is not stored long-term. At the end of every day, the public computers are automatically rebooted to bring it back to its original image.
§ Although there are messages and signs to encourage patrons to delete any downloaded files before ending their session, there may be times when a patron’s file is still visible to the next person that signs in. If this happens, reboot the computer so DeepFreeze can bring the frozen image back.
o EnvisionWare: PC Reservation & LPTOne
§ Allows patrons to use a public computer by signing in with their library card number and pin.
§ Staff can use PC Reservation to extend time for a patron once on a computer or to create a guest pass if the patron does not have an LCLS library card.
§ LPTOne allows patrons to print from the computer. Most libraries have a Print Release Station on the circulation desk computers to release these print jobs once the patron is done.
o Acronis Cyber Protect: Antivirus protection
§ Antivirus protection that runs constantly and will flag potential viruses or malware on the computer.
o TeamViewer: Remote access for IT Staff
§ In rare occasions, IT staff may need to assist staff members who are trying to help a patron using a public computer. With TeamViewer, IT staff can remote into the computer to help. An example of when a remote session is needed is to assist a patron with printing a document.
SPARK/Webby Security
· SPARK is the name of the ILS we use to catalog and circulate books and register patrons for library cards. The online interface is referred to as Webby.
· Certain staff members have staff-only privileges to provide overrides in Webby. An example of an override is allowing a patron to renew an item even if there are no renewals left.
o If you are a staff member with these privileges, please note that your login information for SPARK is different from your Microsoft account.
o Staff SPARK accounts must be renewed on a yearly basis. It is encouraged to change your password when renewing your account to prevent passwords from being stolen.