Page:Securing Personal E-mail Accounts.pdf/1

 MRN: 11 STATE 65111

Date/DTG: Jun 28, 2011 / 282223Z JUN 11

From: SECSTATE WASHDC

Action: ALL DIPLOMATIC AND CONSULAR POSTS COLLECTIVE ROUTINE

E.O.: 13526

TAGS: APCS, ASEC, AADP, AMGT

Subject: Securing Personal E-mail Accounts

UNCLAS STATE 065111

E.O. 13526: N/A

TAGS: APCS, ASEC, AADP, AMGT

SUBJECT: Securing Personal E-mail Accounts

Reference:

A) 12 FAM 544.3

Department of State users are encouraged to check the security settings and change passwords of their home e-mail accounts because of recent targeting of personal e-mail accounts by online adversaries. Security guidelines have been posted on the DS/SI/CS Cyber Security Awareness web page: http://intranet.ds.state.sbu/DS/SI/CS/Awareness1/Content/Personal%20Email.aspx.Recently, Google asserted that online adversaries are targeting the personal Gmail accounts of U.S. government employees. Although the company believes it has taken appropriate steps to remediate identified activity, users should exercise caution and follow best practices in order to protect personal e-mail and prevent the compromise of government and personal information. The DS/SI/CS Cyber Security Awareness web site contains guides to help secure the web-based e-mail accounts of users and their families.

This information can be accessed at:

http://intranet.ds.state.sbu/DS/SI/CS/Awareness1/Content/Personal%20Email.aspx.What can you and your family members do? Follow the personal e-mail guides posted on the Awareness site to change your password, to ensure that messages are not auto-forwarding to an unintended address, and to verify that other security settings are properly configured.Beware of e-mail messages that include links to password reset web pages. These can be easily faked.Create strong passwords for all of your online accounts, change them often, and never use the same password for more than one account.Avoid conducting official Department business from your personal e-mail accounts.<li>Do not reveal your personal e-mail address in your work "Out of Office" message.</li><li>Do not auto-forward Department e-mail to personal e-mail accounts, which is prohibited by Department policy (12 FAM 544.3).</li></ol></li> <li>Questions regarding cyber security awareness should be addressed to awareness@state.gov</li> </ol>

CLINTON