Background: As malicious software becomes more ubiquitous, SELC's online data security becomes increasingly precarious. The following protocols are simple tools to ensure that SELC's online content controlled under @theselc.org is not accessed by those outside of our organization.

Staff are generally expected to use their own laptops and cell phones for work, and to take the following measures to insure that any Law Center data is protected on these personal devices.

1. Set and use a passcode (e.g. pin number or password) to access your device. Whenever possible, use a strong passcode. Do not share the passcode with anyone.

2. Set your device to lock automatically when the device is inactive for more than a few minutes.

3. Take appropriate physical security measures. Do not leave your device unattended.

4. Keep your software up to date.

5. Every staff member shall configure their device to enable remote-wipe if it should become lost. Please refer to the following instructions to enable remote wipe on any of your devices, including computer, phone, or tablet, that contain data related to the Law Center:

   1. 1. Android devices: https://support.google.com/accounts/answer/6160491?hl=en

      2. Find, lock, or erase your lost phone or Chromebook: https://support.google.com/chrome/answer/7177579?hl=en

      3. Iphones & Mac Computers: https://support.apple.com/kb/ph2701?locale=en_US

      4. Windows Laptops-not easily configured...Users must sign into Asana with Use Google account buttons so that it is easy to change the password.

6. Anyone provided an @theselc.org account shall enable the 2-step verification security protocol for that account. (The quickest way to set up 2 step verification is to copy and paste the following into your browser and follow the instructions: accounts.google.com/SmsAuthConfig. Also, here's a nifty video to help you set it up and also a google support page.)

For support, please reach out to the Data Security & Internal Comms Role energizers, currently Sue and Ricardo).

When you stop using your device (for example because you have replaced it) and when you leave the Law Center’s employment, securely delete all (non-published) Law Center information from your device. One month after the end of a staff member’s employment at the Law Center, the data that is owned under the staff member’s individual domain name and email will be transferred to communications@theselc.org.

(AC)