National KE-CIRT/CC Cybersecurity Best Practice Guide of the Week

 

SAFELY DISPOSE OF SENSITIVE/CONFIDENTIAL DOCUMENTS

 

In This Issue:

*        Safely dispose of documents

 

 

 

 

 

 

 

 

 

 

 

Most people would define their sensitive documents as anything containing account numbers, social security numbers, private correspondence, bank statements, bills, medical information, legal information, passwords, pays lips, company policy documents etc.

We would like you to think further and consider including anything with your signature, e-receipts, pre-approved credit card offers, budget plans and even the envelopes that come with all these documents mentioned.

Why is this important ?

The main reason for securely disposing off sensitive/confidential documents is Identity theft.

IDENTITY THEFT is the deliberate use of someone else's identity, usually as a method to gain a financial advantage or obtain credit and other benefits in the other person's name.

Identity theft can occur by one obtaining your information through a number of sources, but today we’ll be helping you take away one of their biggest assets which is your trash.

DUMPSTER DIVING is a technique used to retrieve information that could be used to carry out an attack such as identity theft by analyzing ones trash.

 

How to Safely Dispose of Your Documents

*      Always follow procedures set in place by the organization in regard to disposal of paper information.

*      Shred documents that you no longer need instead of crumpling them and throwing them in the dustbin.

*      Ensure that all the procured shredders are of the highest shredder security levels i.e. Security Level 5 or 6.

*      Burning documents is a simpler solution, but do exercise caution. Select a safe place to incinerate them and consider any local fire restrictions.

*      Soaking will cause papers to dissolve into a soggy mess and render them easy to tear apart.

Have the above security tips in mind when disposing your documents. Report any cybercrime incident/activity to  incidents@ke-cirt.go.ke. / www.ke-cirt.go.ke