carefully what security features are A lot of the attacks these days are targeting implemented by the cloud service end users. Once a user’s computer is providers. Examine what data encryption compromised, the data stored in the cloud is used on the cloud platform, how data is can be subsequently retrieved by the protected during uploading and hacker. So University students and staff are downloading, and the authentication advised to develop the following good channel. Choose cloud service providers computing habits when using the cloud: with reputable name with no precedence of security incidents. Exercise safe browsing habits if a web site looks shady, it usually is Software Features shady. Don’t further click on links or downloads; For Universities’ usage, administrators Use devices that you to should make sure that cloud members can connect to the cloud, i.e. minimize be easily added and deleted depending on the use of public computers which the academic year. do not fulfil the security standard; Enable and use two-factor Also, check carefully the correct package of authentication if available from cloud applications with the intended cloud service providers; features before paying for usage. Choose different passwords and Sometimes cloud applications may miss credentials for University IT some features which would be otherwise systems and public cloud services; available when buying the software Change passwords regularly; separately. Log off sessions when finished; Don’t open or click on links in strange or unsolicited e-mail; Tips for Students and Staff Install anti-malware software on computing devices. In corporate environment, users are The Hong Kong Government has created a normally governed by corporate IT web site to educate the public about cloud security policy and the computing devices usage, useful tips and checklists regarding are typically standardized with hardened cloud usage can be found from . security configurations. But in Universities, students and staff are allowed to use own computing devices. And security governance is more relaxed compared to corporate environment.
carefully what security features are implemented by the cloud service providers. Examine what data encryption is used on the cloud platform, how data is protected during uploading and downloading, and the authentication channel. Choose cloud service providers with reputable name with no precedence of security incidents. Software Features For Universities’ usage, administrators should make sure that cloud members can be easily added and deleted depending on the academic year. Also, check carefully the correct package of cloud applications with the intended features before paying for usage. Sometimes cloud applications may miss some features which would be otherwise available when buying the software separately. Tips for Students and Staff In corporate environment, users are normally governed by corporate IT security policy and the computing devices are typically standardized with hardened security configurations. But in Universities, students and staff are allowed to use own computing devices. And security governance is more relaxed compared to corporate environment. A lot of the attacks these days are targeting end users. Once a user’s computer is compromised, the data stored in the cloud can be subsequently retrieved by the hacker. So University students and staff are advised to develop the following good computing habits when using the cloud: Exercise safe browsing habits if a web site looks shady, it usually is shady. Don’t further click on links or downloads; Use devices that you to connect to the cloud, i.e. minimize the use of public computers which do not fulfil the security standard; Enable and use two-factor authentication if available from cloud service providers; Choose different passwords and credentials for University IT systems and public cloud services; Change passwords regularly; Log off sessions when finished; Don’t open or click on links in strange or unsolicited e-mail; Install anti-malware software on computing devices. The Hong Kong Government has created a web site to educate the public about cloud usage, useful tips and checklists regarding cloud usage can be found from .
CloudComputing-SecurityPracticesforGeneralUser.docx