Best Practices

Important Topics

If Traveling to non-sanctioned countries
DUO mobile app: Most of the time, you can safely use the DUO mobile app on a smartphone or tablet. Even if you don’t have cell phone service or a Wi-Fi connection, the app can still generate a passcode. As an alternative you can enroll a secondary device in case your primary device is unavailable.
If Traveling to you MUST
1. 1. Uninstall DUO from any device that has DUO installed
  2. DO NOT take your DUO hardware token with you.
Hardware Token: If you are travelling without a smartphone or tablet, take your hardware token with you (unless you are travelling to a )
Restrictions: When traveling abroad, you’ll need to determine whether export/import controls apply to your trip. For more information, including what items, equipment, or software may be restricted, read .
VPN: Using a Virtual Private Network (VPN) is recommended whenever you connect to the internet, but you will want to confirm that the location you’re traveling to allows use of encryption software. See the that support the personal use exemption for encryption software.
Device Security: If a device is taken away from you in another country and given back, such as in customs, it very well may have been compromised. In this case, it is probably best to refrain from using the device. Email infosec@csusm.edu to notify them of the issue. You may need to reset or wipe your device.

Remain vigilant about the physical security of your devices as you travel. Devices may be at risk of physical tampering or theft, particularly if they are left unattended.
Securely access the internet and your files by using a Virtual Private Network (VPN) while traveling. VPN protects both your security and privacy by encrypting sensitive information and masking your IP address, search history, and location. Global Protect provides secure access to ��’s network.
Avoid using public computers and public charging stations as both may come with malware.
Disable Wi-Fi and Bluetooth when not in use. This will prevent auto-connection to open networks or other devices.
Wait until you’re home to post details about your trip on social media. Announcements made beforehand or while traveling can make you a target of cybercriminals.
If any of your DUO-registered devices are lost or stolen, contact the infosec@csusm.edu and helpdesk@csusm.edu for assistance with deactivating lost or stolen devices from DUO.
All lost ��-owned devices must be reported to infosec@csusm.edu and helpdesk@csusm.edu as soon as possible.

If a device was taken away from you in another country and given back, it very well may have been compromised. You may need to reset or wipe your device. In this case, it is probably best to refrain from using the device. Email infosec@csusm.edu to notify them of the issue.
If you notice any unusual activity with your accounts when you return, use a trusted computer (Not the one you traveled with) to change any passwords you used while traveling and report the activity to infosec@csusm.edu.
Reset the passwords for any and all accounts you accessed while abroad.