As with many areas of life right now, there has been a significant change in the way that University staff conduct their work. This has changed the ways that staff use and access systems as well as how staff handle University information. Fraudsters are also adapting by taking the opportunity to increase attacks when staff might be focussed on other priorities.

Working from home

It’s important to maintain the security of University systems and information while working from home.

• Ensure your sensitive or confidential information is not accessible by others with access to your work area.
• Use OneDrive or SharePoint to store sensitive or confidential information rather than sending by email or using a USB drive.

When using a non-University supplied computer ensure the following:

• Limit the University information stored locally.
• Apply system updates regularly.
• Use strong passwords and a timed screen lock.
• Use antivirus – a free version is provided by the University. 

For links and further guidance, visit the remote working tools page.

Here, Macquarie’s Chief Information Security Officer Jeremy Koster, talks about how you can safeguard your IT security at home.

Increased and targeted phishing

The University has had a sustained increase in the number of phishing attacks in the last few months, attempting to get staff to click on malicious links or disclose personal information. An increasingly popular technique is to mimic voicemail systems, by emailing a fake voicemail notification. It is expected that the fraudsters will also begin to use COVID-19 messages or even package delivery notifications to entice a click.

Before clicking on a link, please consider:

• Is the email out of character for the sender? e.g. does it contain spelling mistakes.
• Does the email address and website address look legitimate?
• If in doubt, report emails to spam@mq.edu.au or use the spam / phishing button in Outlook.

Secure Zoom use

There has been a large amount of discussion in the mainstream media around the use of Zoom. Macquarie has been working closely with Zoom to ensure the security of the University Zoom meetings. To ensure only authorised participants attend meetings consider using one or more of the following features as appropriate for your meeting type:

• Require authentication.
• Zoom waiting room.
• Lock a meeting when all attendees have arrived.

Please also update Zoom when prompted. Further Zoom configuration guides are provided here.

Finally it’s important to report security issues as soon as they occur. Please notify the IT Service Desk of suspicious system messages, exposure to University data or unauthorised system access on 9850 4357 or email help@mq.edu.au.