Operational Security (OPSEC) Briefing for International Travel

Introduction

Operational Security (OPSEC) is a critical aspect of ensuring personal and organizational safety and security, especially when traveling internationally. This briefing aims to provide you with essential guidelines to protect your information, assets, and personal safety during your trip.

Pre-Travel Preparations

1. Pre-Approval:  All travel outside of the United States or Canada where you intend to take Norwich-owned equipment requires approval from the CIO or CISO per the Acceptable Use Policy. Requests must be submitted at least 14 days prior to travel by following the process outlined in the Standard Operating Procedure for International Travel and Convention Attendance with NU Devices/Data.
2. Research Your Destination: Understand the local laws, customs, and political climate of your destination. Identify any regions to avoid due to safety concerns. You can find travel advisory information on the US Department of State's website.
3. Update Software and Devices: Ensure all your electronic devices (laptops, smartphones, tablets) have the latest security updates and patches installed.
4. Back-Up Data: Backup important data before you travel and leave a copy in a secure location. Remove any sensitive data that you do not need from your devices.
5. Secure Your Devices: Encrypt your devices and use strong passwords. Enable multi-factor authentication (MFA) for your accounts where possible.
6. Plan Communication: Establish a communication plan with your organization or family. Use secure methods for communication, such as encrypted messaging apps.

During Travel

1. Limit Social Media Activity: Avoid posting your travel plans and location in real-time. This information can be used against you.
2. Be Aware of Public Wi-Fi: Public Wi-Fi networks can be insecure. Avoid accessing sensitive information over public Wi-Fi. Use a Virtual Private Network (VPN) to secure your internet connection. Norwich offers a secure VPN solution for all employees and staff using Norwich owned equipment. Be sure you know how to use it before your trip.
3. Physical Security: Keep your devices with you at all times. Use hotel safes to store valuables and sensitive documents when necessary. It should be noted that while hotel safes offer a level of security, hotel personnel can still access them.
4. Travel Light with Data: Carry only the data you need for your trip. Avoid carrying unnecessary sensitive information. Do not carry unencrypted removable storage and use Microsoft OneDrive for accessing information needed abroad.

Information Security

1. Avoid Suspicious Emails and Links: Be cautious of phishing attempts and avoid clicking on suspicious links or downloading attachments from unknown sources.
2. Secure Conversations: Be mindful of your surroundings when discussing sensitive information. Avoid discussing such information in public places.
3. Monitor Your Devices: Regularly check your devices for signs of tampering or unauthorized access.
4. Do not connect any device given to you by a stranger to your computing equipment.
5. Use Trusted Transportation: Use reputable transportation services. Avoid sharing your travel details with strangers. Report any suspicious activity immediately.

Upon Return

1. Change Passwords: Change your passwords for all accounts used during your trip.
2. Check Devices: Scan your devices for malware and other security threats. Ensure they are clean and secure.
3. Report Incidents: Report any security incidents or suspicious activities encountered during your trip to your organization's security team.

Emergency Contacts

• Local Embassy/Consulate: Keep contact information for your home country's embassy or consulate in your destination country.
• Local Authorities: Know how to contact local law enforcement and emergency services.
• Organization's Security Team: Have contact information for your organization's security team or emergency contact.

Conclusion

By following these OPSEC guidelines, you can significantly reduce the risks to your personal and organizational security while traveling internationally. Stay vigilant, be prepared, and prioritize your safety at all times.