Regardless of who owns or purchases the device, if you intend to use the device for Harvard business, you are responsible for ensuring it is secure.  

1. Set-up

Go to Settings/Touch ID & Passcode.

[X] Select Enter Passcode.  You will be asked to set a PIN.

[X] (Optional) Select Passcode Lock.  Setting this to 2 minutes provides a balance between keeping the device secure and not needing to enter your password every time the screen turns off.

A PIN by itself is not sufficient. Select one (or both) of the following options. If you are using a device older than an iPad 2 or iPhone 3G, then you will need to do both.  Newer devices are pre-encrypted, so only one extra step is needed.

[X] Turn Erase Data to ON. This will automatically erase all data on your device if someone puts in the incorrect password 10 times.

[X] Turn on Updates under iTunes and App Store. Your apps will now download and install patches automatically.  

***********************************************************************************************************************************************

2. Use and Maintenance

[X]  Keep the Operating System (OS) up to date. Your device will notify you when there is an OS update available.  You should apply these settings promptly. 

[X]  Do not store sensitive information on your device. Level 4 information should not be stored on a mobile device.   Discourage the people you work with from sending such information to you via email or cloud services such as Dropbox or Box.

[X]  Think about the apps you run. Before using an app for Harvard business, you should consider what information you will be providing to the app.  Do you know if it will be stored or transmitted appropriately?   If not, you should not use it for Harvard business.  

If you are not sure whether or not an app is sufficiently secure for what you need to do, consult your local Help Desk or University Support Services at ithelp@harvard.edu.

***********************************************************************************************************************************************

3. Loss or Disposal

If your device is ever lost or stolen:

[X]  Immediately change your Harvard password so your device can't be used to access your email or any of your Harvard accounts.

[X]  Contact Harvard IT.  Because you have been using the device for Harvard business, Harvard may need to report the loss if it contained confidential information.

[X]  From any web browser, log into iCloud and use the “Find My iPhone” tool; this will also work for iPads.  Use the Erase iPhone (or iPad) feature.  It can be later restored it from back-up.

If you intend to trade in, gift, or recycle your device, you need to make sure that it doesn’t have any confidential information on it, and that it cannot access your Harvard account or any of your personal accounts.  

Go to Settings/General/Reset.

[X] Select Erase All Contents and Settings and follow the steps.

Regardless of who owns or purchases the device, if you intend to use the device for Harvard business, you are responsible for ensuring it is secure.   Note: Menu names and options can vary slightly on Android devices depending on the manufacturer.

1. Set-up 

Go to System Settings/Device (or My Device) and open Lock Screen. There are two settings here which you will need to enable.

[X] Under General (or More), open Security. You'll see an option to Encrypt Device.

[X]  Run this process. It will protect the contents of your device if it is ever lost or stolen.  This process may take more than an hour, so you may want to let this process run overnight.

[X]  Also under General (or More), you'll see About Device.  

[X] Open this, and then open Software Update.   If there is an option called Auto Update, turn it on.   This will notify you when there are patches for the device's operating system.  However, it will wait for permission to install them.

 *********************************************************************************************************************************************

2.  Use and Maintenance

[X]  Keep the Operating System (OS) up to date. Your device will notify you when there is an OS update available.  You should apply these settings promptly. 

[X]  Do not store confidential information on your device.   Level 4 information should not be stored on a mobile device.   Discourage the people you work with from sending such information to you via email or cloud services such as Dropbox or Box.

[X]  Think about the Apps you run: Before using an app for Harvard business, you should consider what information you will be providing to the app.  Do you know if it will be stored or transmitted appropriately?   If not, you should not use it for Harvard business.   

If you are not sure whether or not an app is sufficiently secure for what you need to do, consult your local Help Desk or University Support Services at ithelp@harvard.edu.

 **********************************************************************************************************************************************

3. Loss or Disposal

If your device is lost or stolen, you should:

[X]  Contact University Information Security.  Because the device was used for Harvard business, Harvard may need to report the loss if it contained confidential information.

[X]  Log onto Android Device Manager and Enable Lock and Erase.  This will tell Google to send a signal to wipe your device, erasing all data. It can be restored from back-up.

If you intend to trade in, gift, or recycle your device you need to make sure that it doesn’t have contain confidential information, and that it cannot access your Harvard account or any of your personal accounts.  To do this:

Go to System Settings/Backup and Reset. 

[X] Select Factory Data Reset and follow the steps.