Do you travel regularly on business? Discover a few security measures you can adopt quickly to reduce the risk of data loss or theft.
The Director General ofFrance’s Agence nationale de la sécurité des systèmes d’information (ANSSI) outlines nine best practices to follow when traveling with sensitive information.
These include avoiding unnecessary transport of data, informing oneself about the laws of the destination country, backing up data taken on trips, and exercising discretion when handling documents and equipment.
In addition, users should avoid connecting to unsecured networks or devices, inform their security officer in the event of loss or theft of personal effects containing sensitive information, and renew passwords used during the trip.
Here’s a closer look at ANSSI’s recommendations.
Safety precautions before you leave
To begin with, you need to anticipate and prepare for your departure by limiting the transport of superfluous data.
ANSSI takes the example of an employee of a multinational company, who travels abroad to finalize an important contract and uses encryption methods to protect himself.
However, he is subject to strict controls on arrival, and his devices are temporarily seized because he has not obtained prior authorization.
- Travelers are advised to find out about local encryption legislation before setting off.
In another example, we have the case of an employee who owns a custom furniture company and who has to present her strategy to one of her suppliers with her laptop.
During her trip, the laptop falls, causing major damage and the loss of essential documents which had not been backed up beforehand.
- Regularly backing up data on a disconnected medium is an additional security measure.
If you don’t have automatic synchronization with the cloud, such as Kdrive, Onedrive, etc., remember to make regular backups.
Safe travel practices
When traveling, it is advisable to be discreet when handling sensitive documents in public places, and to use privacy filters on devices to prevent confidential information from leaking out.
ANSSI gives the example of an employee who left his or her computer session unlocked during a break in a meeting outside the workplace, which could compromise the confidentiality of the work carried out.
- We advise you to lock your computer when you leave, to use secure professional equipment provided by the organization, and to avoid connecting to unsecured networks.
Avoid connecting to networks or equipment you don’t control.
- Use secure, professional means provided by your organization only (telephone, computer, VPN, etc.)
In another case, a user has lost his work phone.
The phone has been found by someone who can now access their data.
- In this case, it’s important to inform your IT or security manager if a piece of equipment goes missing or acts strangely, so that she can protect the company’s information from malicious connections.
Safety measures to take when returning from your travels
Once you’ve returned from your business trip, it’s a good idea to renew any passwords that may have been compromised during the trip.
To illustrate, ANSSI takes the case of an employee who connected to an open Wi-Fi network during a conference, and her login credentials were intercepted by an attacker on the same network, facilitating the leak of sensitive company information.
Finally, if you notice any unusual alerts on your computer during the trip, have it checked by security when you get back to work.
- Contact the resources listed if you suspect cybercrime or need advice on cybersecurity best practices.
Things to remember
ANSSI provides recommendations for digital nomads, including having the contact details of a representative of the IT/security team, and carrying essential items such as blank USB sticks, a USB battery or adapters.
He also suggests using privacy filters on devices to prevent others from seeing what’s displayed on the screen, and purchasing tamper-proof envelopes to guarantee document integrity.
Note that the Swiss Confederation website also offers a few recommendations when traveling abroad.
