Risk (HIPAA)

profileMichelle_Michy
RiskAssessmentAssignment43.docx

General Security Practices

Do you…

QUESTION

YES

NO

· Set your security software/firewall, internet browser, and operating system (like Windows or Mac OS X) to update automatically?

· Keep your browser’s default security settings (or make them stronger).

· Pay attention to your browser’s security warnings? (Many browsers come with built-in security scanners that warn you before you visit an infected webpage or download a malicious file.)

· Instead of clicking on a link in an email, type the URL of a trusted site directly into your browser?

· Avoid opening attachments in emails unless you know who sent it and what it is?

· Get well-known software directly from the source? (Sites that offer lots of different browsers, PDF readers, and other popular software for free are more likely to include malware.)

· Read each screen when installing new software? (If you don’t recognize a program, or are prompted to install additional “bundled” software, decline the additional program or exit the installation process?)

· Never click on popups or banner ads about your computer’s performance? (Scammers insert unwanted software into banner ads that look legitimate, especially ads about your computer’s health. Avoid clicking on these ads if you don’t know the source.)

· Scan USBs and other external devices before using them? (These devices can be infected with malware, especially if you use them in high traffic places, like public computers)

· Follow other safe computing practices, like not clicking on pop-ups, downloading "free" games or programs, opening chain emails?

· Back up your data regularly?

· Never send personal information in an email

TOTAL

Passwords

Do you…

QUESTION

YES

NO

· Develop strong passwords that use a combination of words, numbers, symbols, and both upper- and lower-case letters

· Create a password phrase and make it relevant. If you’re joining a shopping site for example, think “About to Use Shopping Site” and use “ABT2_uz_$h0pping”

· Use different passwords for every unique account, such as work, banking, and email

· Disable the “save password” feature in your Internet browser

· Never write your password on a postit and stick it on your computer?

· Share your password with others?

TOTAL

Connection

Do you…

QUESTION

YES

NO

· Keep your devices updated with the latest system and application patches

· Assume that Wi-Fi connections are not secure, since many Wi-Fi hotspots don’t encrypt the information you send

· Do not log into financial accounts or other sensitive accounts when using public Wi-Fi networks

· Consider turning off features on your computer or mobile devices that allow you to automatically connect to Wi-Fi

· Encrypt your home wireless network

· Change your router’s default name and password

· Allow only certain devices on your network (based on MAC address—no, I don’t mean Apple)

TOTAL

Mobile device

Do you…

QUESTION

YES

NO

· Make sure the OS and software are up to date at all times

· Download apps from reputable sites and closely review permission requests

· Make sure to check the feedback from other users before installing the program from an app store

· Use a strong, complex password

· Use a security app, if available for your device

· Turn off Bluetooth and other connections when not in use

TOTAL