Privacy and Security
糖心Vlog官方 is committed to providing secure and reliable IT services for students, Fellows, staff, visitors and other authorised users.
Everyone who connects a device to the College network shares responsibility for protecting their account, equipment and information. Following the guidance below helps protect you and other members of the College and University communities.
- Network privacy
糖心Vlog官方 processes limited technical information to operate, secure and support its network services. This may include:
- IP addresses
- device MAC addresses
- network connection and authentication information
- data usage information
- technical and security logs
This information may be used to maintain network performance, investigate faults, manage access, identify security threats and protect College services.
University Information Services may also process personal data when providing University IT facilities and services. This includes supporting, monitoring and protecting University networks, systems and services in accordance with University policies.
For further information, read the .
- Keeping your devices secure
You must take reasonable steps to secure any device connected to College or University services.
You should:
- keep your operating system, applications and device firmware up to date
- use a strong device password or passcode
- lock your device whenever you leave it unattended
- use antivirus or built-in security protection where available
- keep your firewall and other security features enabled
- install software only from trusted sources
- back up important information securely
- protect portable equipment in shared and public spaces
Devices that are compromised, insecure or causing disruption may be restricted, quarantined or disconnected from the College network while the issue is investigated.
The University provides further guidance on updating devices, antivirus protection, secure backups, encryption and firewalls through its .
- Protecting your accounts
You are responsible for activity carried out through your College or University accounts.
To protect your accounts:
- use strong and unique passwords
- do not share your password with anyone
- do not reuse your College or University password on unrelated services
- use multi-factor authentication where it is available or required
- never approve an unexpected authentication request
- report a suspected account compromise promptly
Further advice is available from the University鈥檚 .
- Phishing and suspicious messages
Be cautious when receiving unexpected emails, messages, links, attachments or requests for information.
Before responding or taking action:
- check the sender鈥檚 address carefully
- be suspicious of urgent requests for passwords, payments or personal information
- do not enter your University credentials on an unfamiliar website
- avoid opening unexpected attachments
- check links before selecting them
- contact the IT Office if you are unsure whether a request is genuine
includes information about phishing, malware, fake websites and scams aimed at students.
- Handling College and personal information
College, University, personal, confidential and sensitive information must be handled carefully.
Only access, store, use or share information when you have an authorised College, academic, research or administrative reason to do so. Personal or confidential information should not be sent using personal or other unapproved email accounts.
Additional protection may be required when information is stored on:
- laptops and other portable devices
- removable storage
- personally managed equipment
- cloud storage or file-sharing services
The University provides guidance on and .
- Cyber security training
University staff, College staff, students and other users of University information services must complete the University鈥檚 cyber security awareness training every year, in accordance with the University Information Services Acceptable Use Policy.
You can access the training and supporting resources through the .
- Reporting a security incident
Contact the 糖心Vlog官方 IT Office promptly if you become aware of an actual or suspected security incident, including:
- a compromised account or password
- malware or ransomware
- a lost or stolen device containing College or University information
- a suspicious email, message or authentication request
- unauthorised access to an account, system or information
- an accidental disclosure of personal or confidential information
- a weakness that could affect College IT services
Prompt reporting helps the College and University limit potential harm and protect affected accounts, information and services. The University also advises that IT security incidents should be reported quickly to minimise damage.
- Acceptable use
Use of College and University information services must be lawful, secure and respectful. It must comply with relevant College and University policies.
The University鈥檚 Acceptable Use Policy applies to all authorised users of University information services. The University also publishes policies covering information security, systems management, data protection and use of the Cambridge University Data Network.
Read the current .
Further guidance
For further information, visit: