HSE-Corner: IT-security when travelling to high-risk countries

IT-sikkerhet på reiser

The risk of unwanted incidents may be greater when travelling than at home. When travelling to high-risk countries you must take special precautions.

You should therefore assess the IT security risks before travelling, and what equipment is needed when travelling.

High-risk countries are the ones that the Ministry of Foreign Affairs advises against travelling to. In addition, some countries have an elevated state intelligence risk, which means that we regard them as high-risk countries

The Ministry of Foreign Affairs has a list of countries here (all travel warnings): https://www.regjeringen.no/no/tema/utenrikssaker/reiseinformasjon/reiserad_land/id2589040/

Quick Guide: Key Recommendations

1. DO NOT BRING YOUR REGULAR LAPTOP
Borrow a "clean" laptop from the IT Department.

2. REMOVE UIB FROM YOUR MOBILE PHONE
Remove your UiB account and all UiB-related apps before travelling.

3. DO NOT BRING SENSITIVE INFORMATION
Only bring the information you actually need.

4. BE CAUTIOUS ONLINE
Avoid unknown Wi-Fi networks and limit connections to UiB services.

5. AFTER YOUR TRIP
Change your passwords using a different device, and return the loan laptop directly to the IT Department.

Travelling to a high-risk country

The risk of your mobile phone being monitored or your computer being infected with malicious software is greater in these countries.

When travelling, you have a responsibility to protect both UiB's information as well as equipment.

Laptop when travelling to a high-risk country

  • Do not bring your regular laptop. You can borrow a "clean" laptop without the standard UiB setup from the IT Department.
  • Contact the IT Department well in advance to allow enough time for the laptop to be prepared and for you to familiarise yourself with how to use it.
  • During the trip, you may work with non-sensitive information on the laptop.
  • You can also sign in to your UiB account through a web browser to access UiB's Microsoft 365-based services, such as email and OneDrive.
  • Limit connection to UiB-services to what is required
  • After returning home, do not connect the loan laptop to the UiB network.
  • Return it directly to the IT Department. You will receive assistance in retrieving any data you need from the laptop.

Mobile phone when travelling to a high-risk country

You may use your own mobile phone during the trip provided that you follow these recommendations:

  • All apps and accounts associated with UiB must be removed before travelling. This includes Outlook, Teams, OneDrive, any other relevant apps, and the UiB account itself.
  • Consider changing the password for your UiB account before departure.
  • Do not sign in with the new password on your mobile phone. This helps ensure that services on the mobile phone cannot connect to UiB systems during the trip.

After returning home

  • Change any passwords you used during the trip.
  • Remember to use a different device from the one you took with you when changing your passwords.
  • Return the laptop directly to the IT department without connecting it to UiB-network
  • Contact the IT department if your equipment is behaving abnormal, or you suspect it may have been compromised

Legg igjen en kommentar

Your email address will not be published. Obligatoriske felt er merket med *