As part of the University of Waterloo's Flexible and Hybrid Work at Waterloo, employees may work remotely. It is important that your home computing environment is secure.
Secure your home network
- You should use a strong password for your home Wi-Fi network.
- Ensure that your home Internet router has all vendor software patches installed.
- If you rent your router, this may be done automatically by your Internet service provider.
- If you own your own router, you will need to verify this yourself. Refer to your router vendor's website for details.
- Consider using free DNS-level protection for your entire home network, such as the CIRA Canadian Shield or OpenDNS.
- See these videos from IST on how to:
Secure your computer
If you are using a UW-provided computer:
- Use this computer exclusively for work. Do not allow family members or others to use the UW computer you use for work.
- Ensure University-managed security controls remain enabled, including endpoint detection and response, device management tools, software updates, and encryption.
- Promptly report lost or stolen devices and suspected security incidents to the SOC.
If you are using your own computer:
- Avoid blending your work and personal environments (e.g., use separate user accounts for different roles, do not allow anyone else to use your accounts).
- Ensure your home computer is up-to-date (e.g., operating system, web browsers, software, vendor-recommended updates are applied).
- Use reputable endpoint protection software (e.g., antivirus/anti-malware) and ensure it is kept up to date.
- Enable device security features such as a firewall, screen lock, and full-disk encryption where available.
If necessary to access your work environment, use the UW virtual private network (VPN). This allows you to connect securely, as though you were working on campus.
Secure the data
- Store University documents in approved UW services such as Microsoft SharePoint, OneDrive, or Teams to support collaboration, backup, and recovery.
- Share documents using approved UW collaboration tools whenever possible. Do not send confidential, restricted, or highly restricted information through email unless approved safeguards are in place.
- Do not use personal cloud storage services (e.g., Google Drive, Dropbox, iCloud) to store or share UW information.
- Handle information in accordance with the Guidance on Information Confidentiality Classification (Policy 46).
- Confidential, restricted, or personal information should only be stored on UW-managed devices protected by full-disk encryption.
- Whenever possible, access Univeristy information using approved UW cloud services rather than storing local copies on devices. When working with Highly Restricted information on a non-UW-managed device, use approved UW services protected by Duo 2FA and work only within the online applications where possible.
Secure your collaborations
- Use Skype for Business and Teams to maintain contact with co-workers.
- Test your hardware and software to ensure that webcams, microphones, and other tools function properly and support your work requirements
- Do not click on links in suspicious email messages. Avoid clicking on any links in email if possible; browse to known sites by entering the URL yourself into the browser address bar.
Need help?
Learn more about the resources available to you while working remotely.
If you require further guidance on working from home, please contact your supervisor. For more information on home computing security, please contact the IST service desk.
Policy 46 - Information Management and its supporting guidelines must be followed while working remotely.