81st CS issues practices to aid network security Published April 25, 2012 By 81st Training Wing 81st Communications Squadron KEESLER AIR FORCE BASE, Miss. -- Keep your common access card in your possession at all times. Do not leave it unattended in your workstation. According to Air Force System Security Instruction 8502, "Use a secure screen saver and require users to screen-lock their workstations when unattended...If a common access card is used for workstation access, users must remove it from the reader when workstations are unattended." Logoff your workstation at the end of every duty day. Do not turn your workstation off, especially when going on leave. Also note that removing your CAC is not logging off. Many patches will not successfully install if a user is currently logged onto the workstation. In most cases, patches are pushed to workstations after normal duty hours to reduce impact to our mission; machines that are powered down at night will not receive critical patches in a timely manner. Protect passwords. Do not place passwords on desks, walls, or on the sides of terminals. According to Air Force Instruction 33-100, "Memorize your password. Do not place passwords on desks, walls, sides of terminals, or store them in a function key, log-in script, batch file, or other communications software. If documentation is necessary for mission accomplishment (i.e., pre-established accounts for contingency or exercise), place the password in a properly marked, sealed envelope and store it in a safe." Do not allow other individuals to access Air Force computer systems using your credentials. AFI 33-100, Section 2 outlines inappropriate use specifically. Be sure to properly mark all removable media such as external hard drives, CDs and DVDs. According to AFI 33-100, "Safeguard, mark, and label removable media according to the requirements for the highest level of information ever contained on the media using applicable information security guidance in AFI 31-401 and AFI 33-332, Privacy Act Program. Additionally follow external and internal labeling guidance in Air Force Mannual 33-363." Do not connect unapproved USB devices to any government computer. Do not plug your government or personal phones into government computers for any reason. Even if they are turned off! According to AFI 33-100, "Connecting non-government-owned PEDs to an Air Force network is prohibited. If individuals have a requirement to use a PED on an Air Force network, they must request issuance of a government-owned PED."