Information Technology

Protection of Personal Information

In January 2004, The Personal Information and Protection of Privacy Act,* will require Canadian organizations to consider measures that will help protect Personal Information that is saved electronic format. Consider this legislation, the compliance requirements for other provincial acts governing personal information, the latest breed of computer viruses, and the growing problem of Identity Theft. With these issues in mind, it is important to review your computer/network/personal-data security and consider implementing security policies and technology measures such as installing "Firewall" software to ensure protection of personal information saved on your personal or Church-network computers that are connected to the Internet.

Top

Firewall Software

Firewall software is used to help filter the type of communication between PCs and the Internet. While anti-virus software is able to scan for the newer type of network-based viruses, Firewall software will help protect your computer from network-based viruses and hacking, and in turn, will improve the protection of personal information saved in electronic format. Firewall software will also protect your computer during the time that new network-viruses are released, then reported, and then responded to by Antivirus software companies who then develop and release software and pattern updates.

Firewall software products can vary from easy-to-use to more complex products that are programmable for a network environment.

To start with, if you are using Windows XP, an easy but limited solution is to enable the built-in Firewall under your XP network properties settings.*

For other easy-to-use Firewall software solutions that offer better protection-options and support all recent versions of Windows, you can either purchase a Firewall software option with your Antivirus software, or purchase Anti-virus software such as Trend Micro Internet Security * that includes a built-in firewall capability.

You can also consider software products such as Zone Alarm Pro,* Sygate Personal Firewall Pro* or Black Ice Defender* as easy-to-use firewall-only software solutions.

One last firewall option is to contact your Internet Service Provider (ISP) to see what optional security services they may offer and how those services can help protect your network.

Even if you are using a dial-up connection, it's important to consider Firewall software to protect personal information. Minimally, and as a backup measure, it's also important to password-protect databases and files that contain personal information.

Top

Security Tips

• keep your Windows software up-to-date by checking the Windows Update website* for critical updates (please note that Microsoft never sends software updates via e-mail)
• even with automated anti-virus software updates, it's important to manually check once-a-week for Antivirus software updates that may require a system reboot
• make sure you password protect databases, spreadsheets, and documents that contain personal information that can be used for identity theft
• consider saving files with sensitive personal information on a CD, USB Flash Memory, or diskette versus using the hard-drive
• make sure you have a good password
• backup your critical files in the event a virus causes your system to fail
• install firewall software
• visit the Windows Security site* for additional tips

Top

Suggestions for choosing a Good Password

Good Windows passwords are:

• a minimum of 8 characters in length
• don't include proper names or words that can be cracked by multi-lingual dictionary attacks
• include a punctuation or special characters (e.g. !, $, #, \%, comma, semicolon)†
• include numbers or uppercase letters within the first 4 digits
• are not common words or patterns of letters/numbers on your keyboard that resemble a list of passwords used by viruses such as the "Lovgate" virus.

Security firms recommend never using a proper name as the root of your password. The best passwords are something more random, like using the first letter of each word in a phrase, book-title or song. By taking the first letter of each word, and substituting a special character for a word, and removing all the vowels you'll have an even better password.

†  Some password-protected website services such as on-line banking may not allow the use of special characters in passwords. For password-protected website services, it's best to check for password recommendations.