{"language":"en_GB","topic":{"id":"p66712i14","strTitle":"Physical and Procedural Security","screens":[{"id":"p66712i14s01","strTitle":"Introduction","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s01.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s01a01","layoutId":"p66712i14s01lay01","objVideoData":{"strSrc":"42564\/03_physical-and-procedural_v04_compressed.mp4","strTranscriptText":"Information security isn't just about electronic data.\nIt's also about physical risks too.\nThink about where you work...\nPut yourself in the shoes of a thief for a moment.\nHow much confidential information could you get hold of in just a few minutes?\nYou may be surprised.\nResearch shows that human error is the leading cause of security failures in organisations\nSo how can you avoid being the weakest link in the security chain?\nFind out more in this topic on Physical and Procedural Security."},"active":1},{"id":"p66712i14s01a02","layoutId":"p66712i14s01lay01","strContent":"Select the [b]Play[\/b] button to watch the video again, or scroll down to continue.","active":1},{"id":"p66712i14s01a03","layoutId":"p66712i14s01lay01","strContent":"Select [b]Play[\/b] to begin.","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i14s02","strTitle":"A case of stolen ID: Asad's story","objNormalBackgroundSrc":{"strSrc":""},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s02a01","layoutId":"p66712i14s02lay00","objVideoData":{"strSrc":"42564\/161114_16-415_Topic3_FineCut.mp4","strTranscriptText":"A stranger used my ID pass to get into the building.  I've actually just had a meeting with my Line Manager about it. I had no idea how big of a deal it all was for the University until now. Let's just say I am not going to be employee of the month!\n\nI think it was about two weeks ago. I was getting the bus because it was raining, instead of cycling in. The bus was running late so I was getting a bit stressed. \n\nI think I must have been fiddling with the card and it must have fallen out the holder when I got up. I was running late so I didn't have time to check the seating area.\nI didn't realise until I got to the door of the Admin building when a colleague of mine had to let me in. \n\nI think I was intending to go out and have a look when the rain had stopped, but I guess it was one of those busy days and I just forgot... until the next morning when I had to get let in again.\nI should have reported it then, but I was running a bit late and then work took over again.\n\nBy the third day I did decide to report it... but by then it was apparently too late.\n\nA guy used my card to get into the building...\nHe was walking around upstairs and having a good look around. \nFortunately though a colleague from the accounts department spotted him and she thought his behaviour was a bit odd. She thought he was a visitor and he might need some help. But when she asked him he pretended that he was working here.\n\nHe flashed his ID card with my photo on it, so she knew that something wasn't right and she called Security.\n\nAs far as I am aware, nothing was stolen, but I have learned a lesson about the importance of security where we work.\n"},"active":1},{"id":"p66712i14s02a02","layoutId":"p66712i14s02lay00","strContent":"You can select the [b]Transcript[\/b] button to read what is being said. After watching the video, select [b]Transcript[\/b] to close the transcript.","active":1},{"id":"p66712i14s02a03","layoutId":"p66712i14s02lay00","strContent":"Select the [b]Play[\/b] button to watch the video again, or scroll down to continue.","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i14s03","strTitle":"What is physical information security?","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s03.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s03a01","layoutId":"p66712i14s03lay00","arrStepData":[{"strTitle":"1","objImageSrc":{"strSrc":"42564\/p20825i18s03a03_1.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s03sub01","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"2","objImageSrc":{"strSrc":"42564\/p20825i18s03a03_2.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s03sub02","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"3","objImageSrc":{"strSrc":"42564\/p20825i18s03a03_3.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s03sub03","booAssetOwnedSubscreen":true},"strObjectType":"action"}]}],"active":1},{"id":"p66712i14s03a02","layoutId":"p66712i14s03lay01","strContent":"What is physical information security?","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i14s03sub01","strTitle":"Subscreen 1","assets":[{"id":"p66712i14s03sub01a01","layoutId":"p66712i14s03sub01lay00","strContent":"Physical information security relates to an institution's need to safeguard information and data it holds on computers, media storage devices and in paper files.","active":1},{"id":"p66712i14s03sub01a02","layoutId":"p66712i14s03sub01lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i14s03sub01a03","layoutId":"p66712i14s03sub01lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i14s03sub01a04","layoutId":"p66712i14s03sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s03sub02","strTitle":"Subscreen 2","assets":[{"id":"p66712i14s03sub02a01","layoutId":"p66712i14s03sub02lay00","strContent":"The physical and procedural challenges of keeping information secure have evolved as we are now able to access information wherever we are. It is now harder to physically lock information away, such as when we just used desktop computers and paper records and could lock things in offices or filing cabinets.\n \nSo information is more accessible than ever, but also more at risk than ever of theft or loss as a result.","active":1},{"id":"p66712i14s03sub02a02","layoutId":"p66712i14s03sub02lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i14s03sub02a03","layoutId":"p66712i14s03sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s03sub03","strTitle":"Subscreen 3","assets":[{"id":"p66712i14s03sub03a01","layoutId":"p66712i14s03sub03lay00","strContent":"Organisations typically rely on technological solutions to solve physical security problems - such as card access systems to enter a building. But physical information security is about much more than this.\n\nWe can put in procedural controls but individuals must take ownership and responsibility for their workplace and their actions. As Asad's example shows, any of us can lay our institution open to potential information security risks through our own action, or lack of it.","active":1},{"id":"p66712i14s03sub03a02","layoutId":"p66712i14s03sub03lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i14s03sub03a03","layoutId":"p66712i14s03sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i14s04","strTitle":"What are the risks?","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s04.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s04a01","layoutId":"p66712i14s04lay01","strContent":"Take a look at this office. The owner has gone to make a cup of coffee. There are a number of physical information security risks here. Can you find them?","active":1},{"id":"p66712i14s04a02","layoutId":"p66712i14s04lay01","strContent":"Select each [b]item[\/b] to find out more.","active":1},{"id":"p66712i14s04a03","layoutId":"p66712i14s04lay01","objNormalSrc":{"strSrc":"42564\/p20825i18s04a05_n_cropped_791_x_349_1480691436.jpg","strAltText":""},"objActiveSrc":{"strSrc":"42564\/p20825i18s04a05_h_cropped_791_x_349_1480691487.jpg"},"objVisitedSrc":{"strSrc":"42564\/p20825i18s04a05_v_cropped_791_x_349_1480691520.jpg"},"arrHotspots":[{"strText":"Laptop","objCoords":{"intTop":0,"intLeft":353,"intWidth":157,"intHeight":149}},{"strText":"Paperwork","objCoords":{"intTop":108,"intLeft":257,"intWidth":90,"intHeight":62}},{"strText":"USB stick","objCoords":{"intTop":145,"intLeft":173,"intWidth":61,"intHeight":27}},{"strText":"Smartphone","objCoords":{"intTop":176,"intLeft":172,"intWidth":61,"intHeight":45}},{"strText":"ID pass","objCoords":{"intTop":182,"intLeft":40,"intWidth":81,"intHeight":58}},{"strText":"Waste paper bin","objCoords":{"intTop":267,"intLeft":635,"intWidth":155,"intHeight":82}},{"strText":"Newspaper","objCoords":{"intTop":142,"intLeft":566,"intWidth":80,"intHeight":63}},{"strText":"Shoes","objCoords":{"intTop":290,"intLeft":323,"intWidth":134,"intHeight":59}}],"active":1},{"id":"p66712i14s04a04","layoutId":"p66712i14s04lay01","strContent":"What are the risks?","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i14s04sub01","strTitle":"Computer","assets":[{"id":"p66712i14s04sub01a01","layoutId":"p66712i14s04sub01lay00","strContent":"That's right. This computer has been left open and unlocked. Anyone could sit down at it and access any of the same files or information that the user could.","active":1},{"id":"p66712i14s04sub01a02","layoutId":"p66712i14s04sub01lay00","strContent":"Select [b]another item[\/b] to find out more.","active":1},{"id":"p66712i14s04sub01a03","layoutId":"p66712i14s04sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s04sub02","strTitle":"Paperwork","assets":[{"id":"p66712i14s04sub02a01","layoutId":"p66712i14s04sub02lay00","strContent":"That's right. It's all too easy to leave documents, reports and files lying on desks and shelves. But if these contain exam results, students' personal details or confidential research, for example, then they need to be treated with more care.","active":1},{"id":"p66712i14s04sub02a02","layoutId":"p66712i14s04sub02lay00","strContent":"Select [b]another item[\/b] to find out more.","active":1},{"id":"p66712i14s04sub02a03","layoutId":"p66712i14s04sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s04sub03","strTitle":"Memory stick","assets":[{"id":"p66712i14s04sub03a01","layoutId":"p66712i14s04sub03lay00","strContent":"That's right. Something small like this USB memory stick is a perfect way to carry files and transfer them from one device to another. But that makes it easy to lose or be stolen, along with all the information on it.","active":1},{"id":"p66712i14s04sub03a02","layoutId":"p66712i14s04sub03lay00","strContent":"Select [b]another item[\/b] to find out more.","active":1},{"id":"p66712i14s04sub03a03","layoutId":"p66712i14s04sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s04sub04","strTitle":"Personal device","assets":[{"id":"p66712i14s04sub04a01","layoutId":"p66712i14s04sub04lay00","strContent":"That's right. The occupant of this office has also left their smartphone on the desk while they have left the room. If it is not locked and encrypted, the owner is risking the security of their personal data and potentially the security of the institution's information, if they use it for work too.","active":1},{"id":"p66712i14s04sub04a02","layoutId":"p66712i14s04sub04lay00","strContent":"Select [b]another item[\/b] to find out more.","active":1},{"id":"p66712i14s04sub04a03","layoutId":"p66712i14s04sub04lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s04sub05","strTitle":"Papers in the bin","assets":[{"id":"p66712i14s04sub05a01","layoutId":"p66712i14s04sub05lay00","strContent":"That's right. As well as managing any documents you use and keep, you also need to think about what you throw away.","active":1},{"id":"p66712i14s04sub05a02","layoutId":"p66712i14s04sub05lay00","strContent":"Select [b]another item[\/b] to find out more.","active":1},{"id":"p66712i14s04sub05a03","layoutId":"p66712i14s04sub05lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s04sub06","strTitle":"ID pass","assets":[{"id":"p66712i14s04sub06a01","layoutId":"p66712i14s04sub06lay00","strContent":"That's right. This person has left their security pass on their desk. As Asad discovered in the earlier example, this can quite literally open the doors to all kinds of information security risks.","active":1},{"id":"p66712i14s04sub06a02","layoutId":"p66712i14s04sub06lay00","strContent":"Select [b]another item[\/b] to find out more.","active":1},{"id":"p66712i14s04sub06a03","layoutId":"p66712i14s04sub06lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s04sub07","strTitle":"Newspaper","assets":[{"id":"p66712i14s04sub07a01","layoutId":"p66712i14s04sub07lay00","strContent":"It's just a newspaper. It's not likely to pose any security risk.","active":1},{"id":"p66712i14s04sub07a02","layoutId":"p66712i14s04sub07lay00","strContent":"Select [b]another item[\/b] to find out more.","active":1},{"id":"p66712i14s04sub07a03","layoutId":"p66712i14s04sub07lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s04sub08","strTitle":"Shoes","assets":[{"id":"p66712i14s04sub08a01","layoutId":"p66712i14s04sub08lay00","strContent":"These are not an information security risk. It's just a pair of shoes. ","active":1},{"id":"p66712i14s04sub08a02","layoutId":"p66712i14s04sub08lay00","strContent":"Select [b]another item[\/b] to find out more.","active":1},{"id":"p66712i14s04sub08a03","layoutId":"p66712i14s04sub08lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i14s05","strTitle":"Managing the risks","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s05.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s05a01","layoutId":"p66712i14s05lay00","strContent":"On the previous screen you explored some typical physical information security pitfalls that need to be avoided. So what can you do to reduce the risks from each of these situations?","active":1},{"id":"p66712i14s05a02","layoutId":"p66712i14s05lay00","strContent":"Select each [b]heading[\/b] to find out more.","active":1},{"id":"p66712i14s05a03","layoutId":"p66712i14s05lay00","arrHottext":[{"strText":"Computer","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s05sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Paperwork","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s05sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Removable devices","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s05sub03","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Personal devices","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s05sub04","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"Disposal","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s05sub05","booAssetOwnedSubscreen":false},"strObjectType":"action"}]},{"strText":"ID pass","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s05sub06","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"active":1},{"id":"p66712i14s05a04","layoutId":"p66712i14s05lay00","strContent":"Managing the risks","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i14s05sub01","strTitle":"Computer","assets":[{"id":"p66712i14s05sub01a01","layoutId":"p66712i14s05sub01lay00","strContent":"By locking your computer when you leave it - even if it is just to make a cup of coffee - you can be sure that no-one else can access your files.\n \nThis ensures the confidentiality, integrity (accuracy and completeness) and ongoing availability of the data.","active":1},{"id":"p66712i14s05sub01a02","layoutId":"p66712i14s05sub01lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i14s05sub01a03","layoutId":"p66712i14s05sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s05sub02","strTitle":"Paperwork","assets":[{"id":"p66712i14s05sub02a01","layoutId":"p66712i14s05sub02lay00","strContent":"If information is confidential, it must be locked away. It's good practice to lock all paperwork away as a matter of routine.","active":1},{"id":"p66712i14s05sub02a02","layoutId":"p66712i14s05sub02lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i14s05sub02a03","layoutId":"p66712i14s05sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s05sub03","strTitle":"Removable devices","assets":[{"id":"p66712i14s05sub03a01","layoutId":"p66712i14s05sub03lay00","strContent":"Despite their declining popularity, USB sticks are often used to easily move and store information but these features also make them easy to be lost or stolen.\n\nIf the USB stick contains unencrypted confidential data it can be easily read by a thief. A USB stick can also be used by a criminal to take confidential data from an unlocked computer. For this reason, removable devices can pose significant information security risks.\n\nYou can learn more about these in the [b]Common threats and how to counter them[\/b] topic.","active":1},{"id":"p66712i14s05sub03a02","layoutId":"p66712i14s05sub03lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i14s05sub03a03","layoutId":"p66712i14s05sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s05sub04","strTitle":"Personal devices","assets":[{"id":"p66712i14s05sub04a01","layoutId":"p66712i14s05sub04lay00","strContent":"Devices such as smartphones, tablets and laptops are small, attractive and tempting to thieves - they often contain a lot of valuable personal information too. So, it makes sense to keep your personal devices locked and in your possession or in a safe place at all times.\n \nYou can learn more about the risks and best practice for the use of personal devices in the topic about [b]Working remotely and in the cloud[\/b].","active":1},{"id":"p66712i14s05sub04a02","layoutId":"p66712i14s05sub04lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i14s05sub04a03","layoutId":"p66712i14s05sub04lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s05sub05","strTitle":"Disposal","assets":[{"id":"p66712i14s05sub05a01","layoutId":"p66712i14s05sub05lay00","strContent":"Confidential information must be disposed of properly using the facilities available to you. This means ensuring that any confidential paperwork that is no longer needed is correctly shredded.\n\nIt also means you need to follow the correct procedures for the safe disposal of other forms of stored information, including equipment such as laptops. You can see an example on the next screen.","active":1},{"id":"p66712i14s05sub05a02","layoutId":"p66712i14s05sub05lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i14s05sub05a03","layoutId":"p66712i14s05sub05lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s05sub06","strTitle":"ID pass","assets":[{"id":"p66712i14s05sub06a01","layoutId":"p66712i14s05sub06lay00","strContent":"Look after your ID or security pass at all times. Keep it safe, whether you are at home, work, or travelling to and from work.\n\nIf you do lose it, report it as soon as possible so that it can be deactivated. ","active":1},{"id":"p66712i14s05sub06a02","layoutId":"p66712i14s05sub06lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i14s05sub06a03","layoutId":"p66712i14s05sub06lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i14s06","strTitle":"Case study: Disposal of information","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s06.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s06a01","layoutId":"p66712i14s06lay00","strContent":"Senior Lecturer Dr. Banks is in trouble. In fact he's facing a disciplinary hearing! Here he is to explain it himself, along with some of his colleagues involved.","active":1},{"id":"p66712i14s06a02","layoutId":"p66712i14s06lay00","arrStepData":[{"strTitle":"1","objImageSrc":{"strSrc":"42564\/p20825i18s06a04_1.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s06sub01","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"2","objImageSrc":{"strSrc":"42564\/p20825i18s06a04_2.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s06sub02","booAssetOwnedSubscreen":true},"strObjectType":"action"}]},{"strTitle":"3","objImageSrc":{"strSrc":"42564\/p20825i18s06a04_3.jpg","strAltText":""},"arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s06sub03","booAssetOwnedSubscreen":true},"strObjectType":"action"}]}],"active":1},{"id":"p66712i14s06a03","layoutId":"p66712i14s06lay00","strContent":"Case study: Disposal of information","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i14s06sub01","strTitle":"Subscreen 1","assets":[{"id":"p66712i14s06sub01a01","layoutId":"p66712i14s06sub01lay00","strContent":"Select [b]Play[\/b] to listen to Dr. Banks.","active":1},{"id":"p66712i14s06sub01a02","layoutId":"p66712i14s06sub01lay00","objAudioData":{"strSrc":"42564\/p20825i18s06sub00a02a.mp3","strTranscriptText":"Dr Banks: "Well, I recently received a research grant. That meant I could buy a new laptop as mine was becoming a bit slow... but it still had a bit of life left in it. So I saw the chance to pass it on to my colleague, Dr Edmeades, to use as I knew he didn't have one.""},"active":1},{"id":"p66712i14s06sub01a03","layoutId":"p66712i14s06sub01lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i14s06sub01a04","layoutId":"p66712i14s06sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s06sub02","strTitle":"Subscreen 2","assets":[{"id":"p66712i14s06sub02a01","layoutId":"p66712i14s06sub02lay00","strContent":"Select [b]Play[\/b] to listen to Dr. Edmeades.","active":1},{"id":"p66712i14s06sub02a02","layoutId":"p66712i14s06sub02lay00","objAudioData":{"strSrc":"42564\/p20825i18s06sub01a04.mp3","strTranscriptText":"Dr Edmeades: "Well I gratefully started working on the laptop, but straight away I discovered Dr Banks had left some files on the hard drive. One of them had the appraisal details for all the members of our department... Well I could hardly not have a look, could I? And then I could hardly resist discussing it with the others...""},"active":1},{"id":"p66712i14s06sub02a03","layoutId":"p66712i14s06sub02lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i14s06sub02a04","layoutId":"p66712i14s06sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s06sub03","strTitle":"Subscreen 3","assets":[{"id":"p66712i14s06sub03a01","layoutId":"p66712i14s06sub03lay00","strContent":"Select [b]Play[\/b] to listen to Dr. Andrews.","active":1},{"id":"p66712i14s06sub03a02","layoutId":"p66712i14s06sub03lay00","objAudioData":{"strSrc":"42564\/p20825i18s06sub02a04.mp3","strTranscriptText":"Dr Andrews: "And I am furious with both of them. The laptop shouldn't have been passed on without the data being securely deleted. I expected better of Dr Edmeades, with all his experience. The information shouldn't have been disclosed. There are likely to be repercussions now involving the Information Commissioner's Office. Dr Banks' credibility is in tatters and it's certainly not going to help his career.""},"active":1},{"id":"p66712i14s06sub03a03","layoutId":"p66712i14s06sub03lay00","strContent":"Select the [b]down arrow[\/b] to find out more.","active":1},{"id":"p66712i14s06sub03a04","layoutId":"p66712i14s06sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i14s07","strTitle":"Check your understanding","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s07.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s07a01","layoutId":"p66712i14s07lay01","strContent":"You've seen what can happen when someone passes on computer equipment thoughtlessly, and carelessly discarding it could also cause major problems. What should Dr Banks have done - indeed what should you do with any equipment you no longer need?","active":1},{"id":"p66712i14s07a02","layoutId":"p66712i14s07lay01","strContent":"Select two answers, then select [b]Confirm[\/b].","active":1},{"id":"p66712i14s07a03","layoutId":"p66712i14s07lay01","arrOptions":[{"strOptionText":"Delete confidential files before passing it on"},{"strOptionText":"Destroy the equipment - it's the only way to be sure of deletion"},{"strOptionText":"Seek advice from the IT department"},{"strOptionText":"Dispose of redundant equipment through IT Services"}],"arrCorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s07sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"arrFinalIncorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s07sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"arrFirstIncorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s07sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"active":1},{"id":"p66712i14s07a04","layoutId":"p66712i14s07lay01","strContent":"Check your understanding","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i14s07sub01","strTitle":"Correct","assets":[{"id":"p66712i14s07sub01a01","layoutId":"p66712i14s07sub01lay00","strContent":"That's right. Deleting files may not be enough to erase them permanently and you don't need to go to the extreme of destroying equipment.\n \nInstead, in a situation like Dr Banks found himself in, you should seek advice from your IT team who will advise on what can be done, as well as being able to dispose of equipment securely.","active":1},{"id":"p66712i14s07sub01a02","layoutId":"p66712i14s07sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s07sub02","strTitle":"Incorrect","assets":[{"id":"p66712i14s07sub02a01","layoutId":"p66712i14s07sub02lay00","strContent":"That's not right. Deleting files may not be enough to erase them permanently and you don't need to go to the extreme of destroying equipment.\n \nInstead, in a situation like Dr Banks found himself in, you should seek advice from your IT team who will advise on what can be done, as well as being able to dispose of equipment securely.","active":1},{"id":"p66712i14s07sub02a02","layoutId":"p66712i14s07sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i14s08","strTitle":"The risks of using USB memory sticks","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s08.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s08a01","layoutId":"p66712i14s08lay00","strContent":"Using information while on the move and across different computers and locations means we have a need for portable storage devices. USB sticks, for example, are small, convenient and increasingly able to store very large amounts of data. But their size and ease of use make them a popular route for cyber attacks.","active":1},{"id":"p66712i14s08a02","layoutId":"p66712i14s08lay00","strContent":"Select [b]Case study[\/b] to see what could happen.","active":1},{"id":"p66712i14s08a03","layoutId":"p66712i14s08lay00","arrHottext":[{"strText":"Case study","arrActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s08sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}]}],"active":1},{"id":"p66712i14s08a04","layoutId":"p66712i14s08lay00","strContent":"The risks of using USB memory sticks","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i14s08sub01","strTitle":"Case study","assets":[{"id":"p66712i14s08sub01a01","layoutId":"p66712i14s08sub01lay00","strContent":"Think about the following example - what would you do? Anecdotal evidence points to the lure of USB sticks - a stick labelled 'Annual pay reviews' was deliberately left by a cyber attacker in an office toilet.\n \nWhen an employee found it and curiously plugged it in, it installed advanced malware known as ransomware. This encrypted all document files on the device and shared networks that the computer was connected to.","active":1},{"id":"p66712i14s08sub01a02","layoutId":"p66712i14s08sub01lay00","strContent":"Select another [b]heading[\/b].","active":1},{"id":"p66712i14s08sub01a03","layoutId":"p66712i14s08sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i14s09","strTitle":"USB memory sticks: Managing the risks","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s09.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s09a01","layoutId":"p66712i14s09lay01","strContent":"Removable storage devices can make our work easier and more convenient, so what steps can you take to make sure you keep information safe when using them?","active":1},{"id":"p66712i14s09a02","layoutId":"p66712i14s09lay01","strContent":"Select [b]each heading[\/b] to find out more.","active":1},{"id":"p66712i14s09a03","layoutId":"p66712i14s09lay01","arrStepData":[{"strTitle":"Keep it safe","strContent":"Don't forget that USB sticks are small and can be easily lost or stolen. Keep your own removable storage devices safe from theft and avoid sharing them with others.\n \nDo not attach a found USB device to your computer without first asking your IT team to check it is safe to use."},{"strTitle":"Is there a safer way to transfer data?","strContent":"If you need to transfer confidential data electronically, can you use an encrypted email to send the file\/data instead? Or perhaps your institution has an authorised and secure online shared collaborative space you could use? Don't transfer work data to a personal email account. Speak to your Information Security team for more advice. "},{"strTitle":"Encryption","strContent":"If you must use USB sticks or other hardware such as CDs or portable devices to transfer data, make sure the data on them is encrypted."},{"strTitle":"Know the policy","strContent":"Always follow your institution's policy on the safe use of removable devices and media. Make sure you know where to find details of your local security policy and procedures."}],"active":1},{"id":"p66712i14s09a04","layoutId":"p66712i14s09lay01","strContent":"Select [b]another heading[\/b] to find out more.","active":1},{"id":"p66712i14s09a05","layoutId":"p66712i14s09lay01","strContent":"Scroll down to continue.","active":1},{"id":"p66712i14s09a06","layoutId":"p66712i14s09lay03","strContent":"[b]USB memory sticks: Managing the risks[\/b]","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i14s10","strTitle":"Handling paperwork","objNormalBackgroundSrc":{"strSrc":"42564\/background_04.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s10a01","layoutId":"p66712i14s10lay00","strContent":"Many institutions have greatly reduced the amount of hard copy data, or paperwork, they use but it still is an important part of information security management. Here are the things to consider when handling confidential documents.","active":1},{"id":"p66712i14s10a02","layoutId":"p66712i14s10lay00","strContent":"Select each [b]image[\/b] to find out more.","active":1},{"id":"p66712i14s10a03","layoutId":"p66712i14s10lay00","objNormalSrc":{"strSrc":"42564\/p20825i18s10a03_n.png","strAltText":""},"objActiveSrc":{"strSrc":"42564\/p20825i18s10a03_h.png"},"objVisitedSrc":{"strSrc":"42564\/p20825i18s10a03_v.png"},"arrHotspots":[{"strText":"A printer.","objCoords":{"intTop":13,"intLeft":0,"intWidth":307,"intHeight":312}},{"strText":"A photocopier.","objCoords":{"intTop":15,"intLeft":323,"intWidth":317,"intHeight":308}},{"strText":"A postbox.","objCoords":{"intTop":18,"intLeft":661,"intWidth":299,"intHeight":302}}],"active":1},{"id":"p66712i14s10a04","layoutId":"p66712i14s10lay00","strContent":"Handling paperwork","active":1},{"id":"p66712i14s10a05","layoutId":"p66712i14s10lay00","objNormalSrc":{"strSrc":"42564\/p20825i18s10a03_n_tablet.png","strAltText":""},"objActiveSrc":{"strSrc":"42564\/p20825i18s10a03_h_tablet.png"},"objVisitedSrc":{"strSrc":"42564\/p20825i18s10a03_v_tablet.png"},"arrHotspots":[{"strText":"","objCoords":{"intTop":14,"intLeft":135,"intWidth":230,"intHeight":223}},{"strText":"###INSERT TITLE###","objCoords":{"intTop":258,"intLeft":136,"intWidth":227,"intHeight":228}},{"strText":"###INSERT TITLE###","objCoords":{"intTop":502,"intLeft":137,"intWidth":224,"intHeight":237}}],"active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i14s10sub01","strTitle":"Printing","assets":[{"id":"p66712i14s10sub01a01","layoutId":"p66712i14s10sub01lay00","strContent":"Most institutions use shared network printers. In some cases you may need to log into the printer before using it, so be sure to log out again. If you use a printer that prints without logging in, please make sure you pick up your printing promptly, especially when waiting for multiple copies or larger print jobs, and take extra care with confidential documents.\n \nDon't forget to lock your computer and keep other items safe while you go to pick up your printout.","active":1},{"id":"p66712i14s10sub01a02","layoutId":"p66712i14s10sub01lay00","strContent":"Select [b]another image[\/b] to find out more.","active":1},{"id":"p66712i14s10sub01a03","layoutId":"p66712i14s10sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s10sub02","strTitle":"Copying","assets":[{"id":"p66712i14s10sub02a01","layoutId":"p66712i14s10sub02lay00","strContent":"If you need to make copies of confidential documents, make sure to take all your copies as well as the original document.","active":1},{"id":"p66712i14s10sub02a02","layoutId":"p66712i14s10sub02lay00","strContent":"Select [b]another image[\/b] to find out more.","active":1},{"id":"p66712i14s10sub02a03","layoutId":"p66712i14s10sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s10sub03","strTitle":"Posting","assets":[{"id":"p66712i14s10sub03a01","layoutId":"p66712i14s10sub03lay00","strContent":"When posting confidential information, it is best to use two envelopes, one inside the other.\n\nYou should leave the outer envelope plain, without any indication of sensitivity (e.g. 'Confidential', 'Private', etc.), so as not to attract attention to it. Then, you should appropriately mark the inner envelope in accordance with your institution's policy.\n\nThis way, potential thieves aren't alerted to the nature of what's being posted, while the recipient will become aware when they open the first envelope. Within the institution, deliver confidential information by hand where appropriate.\n ","active":1},{"id":"p66712i14s10sub03a02","layoutId":"p66712i14s10sub03lay00","strContent":"Select [b]another image[\/b] to find out more.","active":1},{"id":"p66712i14s10sub03a03","layoutId":"p66712i14s10sub03lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i14s11","strTitle":"Check your understanding","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s11.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s11a01","layoutId":"p66712i14s11lay00","strContent":"Which of the following statements about physical procedures relating to information security are true?","active":1},{"id":"p66712i14s11a02","layoutId":"p66712i14s11lay00","strContent":"Select [b]three [\/b]options, then select [b]Confirm[\/b].","active":1},{"id":"p66712i14s11a03","layoutId":"p66712i14s11lay00","arrOptions":[{"strOptionText":"Information security is just about having the right technology in place"},{"strOptionText":"Human actions are a major physical information security risk factor"},{"strOptionText":"Personal equipment and removable storage devices should only be used for confidential work-related activities if they are secured and their use is endorsed."},{"strOptionText":"Encryption is a key way to protect portable devices"},{"strOptionText":"Once I put confidential documents in the bin, they are no longer at risk"},{"strOptionText":"The IT and Information Security team are solely responsible for the physical information security"}],"arrCorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s11sub02","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"arrFinalIncorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s11sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"arrFirstIncorrectActions":[{"strActionType":"showSubScreen","strActionGroup":"subscreen","objParameters":{"strSubScreenID":"p66712i14s11sub01","booAssetOwnedSubscreen":false},"strObjectType":"action"}],"active":1},{"id":"p66712i14s11a04","layoutId":"p66712i14s11lay00","strContent":"Check your understanding","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[{"id":"p66712i14s11sub01","strTitle":"Incorrect","assets":[{"id":"p66712i14s11sub01a01","layoutId":"p66712i14s11sub01lay00","strContent":"That's not right. Human actions, such as complacency, negligence and recklessness, are a key factor in physical information security breaches. Technology is one part of the solution but it also requires everyone to take responsibility for the security of the information they use and produce.\n \nThe use of personal equipment and removable storage devices has enabled a positive transformation in the way we work but they need to be used safely and responsibly. Encryption is part of the answer to keeping data secure, but it also requires effective policy and procedures to be followed.\n \nYour Information Security team and IT Support team can help and advise, but you also need to meet your responsibilities when it comes to maintaining information security.","active":1},{"id":"p66712i14s11sub01a02","layoutId":"p66712i14s11sub01lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1},{"id":"p66712i14s11sub02","strTitle":"Correct","assets":[{"id":"p66712i14s11sub02a01","layoutId":"p66712i14s11sub02lay00","strContent":"That's right. Human actions, such as complacency, negligence and recklessness, are a key factor in physical information security breaches. Technology is one part of the solution but it also requires everyone to take responsibility for the security of the information they use and produce.\n \nThe use of personal equipment and removable storage devices has enabled a positive transformation in the way we work but they need to be used safely and responsibly. Encryption is part of the answer to keeping data secure, but it also requires effective policy and procedures to be followed.\n \nYour Information Security team and IT Support team can help and advise, but you also need to meet your responsibilities when it comes to maintaining information security.","active":1},{"id":"p66712i14s11sub02a02","layoutId":"p66712i14s11sub02lay00","strContent":"Scroll down to continue.","active":1}],"extras":{"scalar":""},"subscreens":[],"active":1}],"active":1},{"id":"p66712i14s12","strTitle":"Summary","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s12.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s12a01","layoutId":"p66712i14s12lay00","strContent":"That completes this section on physical information security and good practice. Let's recap what you covered. In order to keep information secure, you must:\n[list]\n[*]Be vigilant - universities and other institutions are physically much more accessible to thieves than many other types of organisation\n[*]Information held on physical media could be easy to lose or fall into the wrong hands - be sure to lock away confidential information whether it's on paper or an electronic device such as a PC, no matter how long it is unattended for\n[*]If you use a removable storage device, know where to find and make sure you follow your institution's local policy on information security (e.g. ensuring it is encrypted) and keep it safe at all times\n[*]Take care to dispose of information correctly - particularly if that information is stored electronically\n[*]Take extra care when printing or copying confidential information and only do this when absolutely necessary - double-envelope any confidential information sent through the post.\n[\/list]\n","active":1},{"id":"p66712i14s12a02","layoutId":"p66712i14s12lay00","strContent":"Select the [b]Home button [\/b]to start another section.","active":1},{"id":"p66712i14s12a03","layoutId":"p66712i14s12lay00","strContent":"Physical and Procedural Security","active":1},{"id":"p66712i14s12a04","layoutId":"p66712i14s12lay00","strContent":"Summary","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1},{"id":"p66712i14s13","strTitle":"A case of stolen ID: Asad's story","objNormalBackgroundSrc":{"strSrc":"42564\/p20825i18s02.jpg"},"objBackgroundVideo":{"mp4":"","webm":""},"assets":[{"id":"p66712i14s13a01","layoutId":"p66712i14s13lay00","strContent":"Select [b]Play[\/b] to hear Asad's story.","active":1},{"id":"p66712i14s13a02","layoutId":"p66712i14s13lay00","strContent":"Asad works in the University Administration building. Find out how he learned the hard way about the importance of maintaining information security at work.","active":1},{"id":"p66712i14s13a03","layoutId":"p66712i14s13lay00","strContent":"Physical and Procedural Security","active":1},{"id":"p66712i14s13a04","layoutId":"p66712i14s13lay00","strContent":"A case of stolen ID: Asad's story","active":1}],"extras":{"objNavigationConfiguration":{}},"subscreens":[],"active":1}],"active":true}}