I’ve included a PDF of a document for securing your personal devices. Needless to say, it is quite obvious the majority of health care professionals do none of this. However, I highly recommend enhancing your focus on personal digital security. For example, if your laptop is stolen and the hard drive is not encrypted, all your cookies, emails, and login information can be accessed by a skilled criminal. See my guide, attached as a PDF to take your digital security to the industry standard.
The purpose of this document is to provide a guide for improving security of personal devices. This guide currently only supports devices within Apple Ecosystem. Encryption and security of devices is critically important in the event of loss of a personal device. Whether it is stolen or mistakenly lost and unable to be recovered, an unsecured device risks loss of data to unauthorized entities. You would be surprised the amount of data stored on your computer or phone that you didn’t know was there. All your saved logins, email attachments in temporary folders, credit card information, work related data, cookies from your browsing, etc…. the list goes on and on.
How to encrypt your MacOS personal computer:
- Make sure your computer password is distinct from any other password you use at your institution. and equally as robust.
- Click the Apple symbol () in the upper left hand computer.
- Go to “System Preferences”
- Click “Security & Privacy”
- Click “Turn On FileVault” (perform this overnight, as it may take some time)
- You can set a recovery key in your iCloud. This should have a password distinct from other passwords and be as robust, with a variety of alphanumeric symbols.
- Now as proof of encryption, click the Apple symbol () in the upper left hand corner, click the “About This Mac”. Next place the “Security & Privacy” window next to the information window. Take a screen shot (command, shift, option 4) and crop the screen area utilizing the target symbol and your cursor.
- Open Preview app. Press command+n. Save this and back it up online, preferably in a secured email. In the event of data breach, this can be used as proof any PHI that may be on the personal computer is secure.
- You should also enable FileVault for any usb backup drives or usb peripheral drives.
Enable firmware password on your Apple computer:
- Enabling a firmware password on your computer will prevent users from being able to boot your computer from an external drive, unless they know the firmware password. It may seem like overkill, but this is the final step to complete data protection
- Follow this link to the Apple website for a detailed guide: https://support.apple.com/en-us/HT204455
How to encrypt your iPhone:
- Requiring a passcode to open your iPhone now automatically encrypts your iPhone. If you chose to use or organization’s email/VPN on your iPhone, you likely will be required to enter an alphanumeric passcode which will further enhance security.
How to further secure your iPhone:
- Open “Settings”
- Open “Face ID & Passcode”
- Enable Erase Data after 10 failed attempts. This will further protect possible breach of PHI.