Securing the operating system only protects you from "remote" exploits. You also need to secure your office, lab, machine room, and other areas that house your computer systems.
- Lock the door.
- When you aren't around the computer, you should lock the door to defend against someone coming in and stealing the computer or its peripherals. Any dedicated computer rooms should be on a seperate master key than the offices and/or classrooms.
- Lock the keyboard
- If you aren't sitting at your keyboard, be sure to "lock" it. Many screen-savers some with a password-protect feature, while many servers come with a "keyboard-lock" key. Use whichever is available for your platform and/or operating system.
- "Nail down" the computer.
- If the room cannot be locked (ie, labs or cubicles), the computer should be secured to the desk and to prevent the case from opening. Several security vendors sell locking case screws and security chains. CLASnet regularly uses products from these companies to secure hardware: and you can also use other vendors or make security cables from parts available at hardware stores.
- Locate the computer safely
- Do not put computers on the floor. Flooding can occur on any floor in any building, and machines on the floor can be damaged by as little as one inch of standing water. Also, do not put computers on window sills or directly under a window, since rain sometimes leaks in during storms.
- Don't leave written passwords laying around.
- Don't leave "account cards" or slips of paper with your password around your desk. You'd be surprised how easy it is for someone to remember that password, and use it later.
- Turn the monitor away from the entrance.
- Be sure to situate the monitor so you can see someone entering, rather than them seeing you. You don't want a person entering the room to be able to see you typing your password.
