Be aware of physical security

What to do

Prevent unauthorised people from gaining physical access to your workplace or devices.

How to do it

Protect your devices:

• Have passwords or PINs set up on all devices including personal ones like your phone.
• Don’t leave devices unattended. You should keep your devices with you at all times, this includes data storage devices such as portable hard drives and USBs.
• If you find a data storage device, never plug it into your computer. It may contain malware. Report it to the Monash Cyber Team via cyberteam@monash.edu.

Protect your data:

• Shield your devices from view using your body or by cupping your hands when entering passwords or pin numbers, and when accessing confidential or sensitive information.
• Be aware of shoulder surfers on public transport. People can get a lot of your information just by looking over your shoulder.

Protect your workspace:

• Always lock your computer when you are away from your workspace, so that it requires a login when you start it.
• Always keep your staff or student pass with you, or opt for a Digital M-Pass.
• Never let anyone borrow your staff or student pass.
• Don’t hold secure doors open for people you don’t know.
• Don’t leave printed documents in the printer areas.

Why it matters

Cyber or online attacks aren’t the only way people can steal or gain access to confidential information.

If attackers can physically access secure areas and devices, they can bypass digital security measures.