Cyber threats are everywhere but small actions make a big difference. 

By securing your devices, accounts and University data, you help protect yourself and the wider community.

Take these simple steps to keep your information safe, avoid risks and strengthen your security wherever you are – at work, at home and on the go.

1. Protect your device and accounts

Keep your personal data and University accounts secure by following these essential actions.

Install the latest updates 

Keeping your laptop, phone and apps up-to-date helps protect against security flaws that criminals exploit. Use antivirus tools, firewalls and encryption to add extra protection.

If you can’t see your screen, lock it

Always lock your laptop or phone when you step away – even for a few seconds. An unlocked device leaves your information at risk. Someone could easily access your emails, bank accounts and other sensitive data. It also puts the University's reputation at risk. 

Protect your passwords and use multi-factor authentication

Use strong, unique passwords for every account. A password manager can help you create strong passwords and store them securely. Set up two-factor authentication for extra protection. 

Don’t share your password with anyone

No one needs your password for legitimate reasons, except you. Cybercriminals use fake emails, texts and calls to try to trick you into revealing sensitive information. If you're ever unsure, don't respond. 

2. Stay safe online

Spot scams, protect your identity and keep your online presence secure.

Think before you click

Scammers are after your personal information and money. They create urgent, convincing messages designed to trick you. If something doesn’t feel right, don't click on links or download attachments. 

Go to the trusted source

Technology makes it easy to spread false information. To avoid misinformation and scams, always rely on official sources and trusted news outlets.

Protect your social media

Fraudsters use fake accounts to impersonate people and companies you trust. Keep personal information private, be cautious with friend requests and think before you share.

Treat others with respect

The same rules apply online as in person. Don’t share anything offensive or inappropriate, and remember that emails and documents may be shared as part of data protection requests.

3. Handle University data responsibly

Follow these golden rules to protect University information, such as research data and student records. 

These tips are provided to help you follow wider University policy. Staff, students and anyone who handles University data should read the Using and Protecting University information policy.

Know what data you’re working with

Different types of information need different levels of protection. Understand whether the data you're handling is public, internal, confidential or secret.

Back up important work

Make sure your data is backed up and recoverable. Files in the University’s Google Drive and Filestores are backed up automatically. For extra protection, we recommend storing extra copies of critical work in an additional secure location.

Double-check before you send

Sending an email to the wrong person is one of the most common ways data is lost. Before you hit send, ask yourself:

  • What are you sending?
  • Who are you sending it to?
  • Are the attachments correct and necessary? (Consider whether sharing via the University’s Google Drive and Filestores would be more secure. Using these platforms is the preferred option for sharing files, especially when they contain sensitive information.)

Encrypt sensitive files

Before sharing confidential documents, encrypt them to add an extra layer of protection. 

Check before you travel abroad

Depending on your destination and the data you have, your data might be at risk. Follow our travel guidance to check country sanctions, stay secure and take the right steps when you return. 

Cyber awareness: bite-sized training for staff

Recognise common pitfalls and spot potential attacks before they happen. Courses are available through our training platform, MetaCompliance.

Improve your cyber awareness