Information Security Guidelines for International Travel

About

Faculty, staff, and students who travel internationally with devices such as laptops, phones, and other mobile devices, are subject to many risks. This article provides recommendations to reduce the risks when traveling. If you have any questions, please contact ciso@lasalle.edu. 

Preparing to travel

1. Research your destination on the State Department website and follow any precautions recommended. If traveling to a High-Risk destination, including those listed as "Level 3: Reconsider Travel" or "Level 4: DO NOT Travel" by the U.S. Government, please review the recommendations below.
2. Ensure that MFA (Multi-Factor Authentication) is enabled on all of your accounts, including personal accounts.
3. Back up your device(s) before traveling.
4. Set Wi-Fi to "do not automatically connect to Wi-Fi" on all devices where possible.
5. Ensure that your devices are password-protected. 
6. Ensure that all devices are fully patched with the latest software updates and security patches.
7. Remove any sensitive or confidential data stored on your devices. 
8. Set your mobile phone to be wiped after 10 login attempts. Back up your phone before you leave.

Traveling to High Cyber-Risk Countries

Traveling with La Salle devices to some countries is considered high-risk due to government sanctions. The following countries and regions are considered high-risk:  Russia, China, North Korea, Iran, Cuba, Sudan, Syria, and Ukraine.

When traveling to high-risk destinations, follow these specific recommendations:

1. Request a clean, unencrypted loaner laptop from the Helpdesk. Requests should be made at least 2 weeks prior to your trip when possible. Do not bring any other La Salle-issued devices on your trip.
2. Do not bring devices containing any sensitive data.
3. Traveling with encrypted devices- La Salle-issued laptops have encryption enabled.
   1. Do not travel with encrypted devices to China unless you have advance approval from China. China severely restricts the import of unapproved encryption. If you attempt to cross the border with an encrypted device, you may be asked for the decryption key, to unlock the device, or your device may be confiscated.
   2. The U.S. government prohibits traveling with encrypted devices to countries that are considered to support terrorism, namely Cuba, Iran, North Korea, Sudan, and Syria. DO NOT bring encrypted devices to these countries.
4. Use a temporary pre-paid cell phone. Avoid making or receiving voice calls, using voice mail, or sending IM or SMS messages.
5. Disable Wi-Fi and Bluetooth on your devices. 
6. Upon your return, immediately discontinue the use of any devices you used when traveling. The hard drives must be reformatted or the device must be disposed of.
7. Change the passwords for all accounts used while traveling.

While you are traveling

1. Assume everything you do on your device is being monitored, even when using a hotel connection. 
2. Never use public Wi-Fi, computers, or devices to access University or personal information. 
3. Do not plug your phone or other devices into USB charger kiosks.
4. Do not use removable media given to you when traveling, only use devices that you have brought with you.
5. Keep your devices with you at all times. If your device is taken by airport officials or customs you should assume it has been compromised. If your La Salle-issued device is lost or stolen, contact the Helpdesk immediately.

When you return

1. Scan all of your devices for malware.
2. Change all of your passwords.