Travel

Whether you are traveling for research, teaching, study abroad, clinical work, conferences, or global collaboration, it’s important to prepare with security, safety, and compliance in mind. If you have any questions about securing your data on your trip, please contact infosec@wustl.edu 

Before you Leave

1. Travel light. Only bring the devices and data you need for the trip.
2. Consider a loaner laptop. Instead of taking your work computer, WashU IT teams can provide loaner laptops for faculty and staff members with registered international travel at no cost.
3. Offload files. Remove Confidential, Protected, and Controlled Unclassified Information from your devices and instead store them in WashU Box or SharePoint.
   • Some customs officials may inspect and download material from your devices and prevent you from encrypting data. Review the WashU Encryption Policy and encryption laws for destination countries. 
4. Device Settings
   • Turn off biometric authentication (face or fingerprint unlock) and instead use a passcode or password for the duration of your trip.
   • Enable automatic updates.
   • Set auto-lock for your screen during inactivity.
   • Configure “Find My” for finding lost devices. 
5. Encrypted Messaging Apps. For personal devices, keep in touch using end-to-end encrypted messaging apps like Signal or WhatsApp, two popular—and free—options. These apps also encrypt voice calls. 

While Traveling

Physical Security

• Keep an eye on your devices. Your device was probably expensive and is, therefore, an attractive target for thieves. Do not store them in checked luggage or leave them unattended.
• It may seem smart to stash your devices under your desk or chair to keep them out of sight of thieves but doing so also makes it more likely that you will forget them. A forgotten device is easily picked up by others.
• Avoid leaving your device in a vehicle. If you must leave your device in your car, be sure it is out of sight (e.g., in the glove box).
• Don’t “save your seat” with your belongings. Leaving your device unattended, even for a moment—and even if others are “watching it for you”—leaves it vulnerable to theft.
• Do not use unknown USB drives or power cables.
• Avoid unknown public computers, like courtesy computers in business centers or kiosks. Never enter credentials on an untrusted device.
• Review expectations for re-entering the United States. The U.S. government can request to search any devices at the border.
• Do not discuss sensitive research ideas, methods, or results in an unsecure setting.
• If your WashU device is stolen, lost, or confiscated, contact the Office of Information Security at infosec@wustl.edu or 314-747-2955.

Digital Security

• Remain connected to the WashU VPN while accessing the internet.
• For web browsing, visit HTTPS sites only, beware of certificate warnings, and regularly clear browser history/cookies.
  • Follow these guides for clearing browser history/cookies in Chrome, Safari, and Firefox.
• Only access the data and systems you need. 

Upon Return

• Change passwords for any accounts you accessed while traveling.
• Return any loaned devices; do not connect them to the campus network.
• Review your banking and credit card statements.

What To Do If You’re a Victim

If you suspect you’ve been a victim of a cyber threat while traveling, contact the Information Security Office immediately at infosec@wustl.edu or 314-747-2955.