Skip to content

How To

Report Security Incident

Quick Links

Traveling Internationally

For those traveling internationally for work, research, or vacation, protecting personal and institutional data and mobile devices is critical. Individuals face a variety of threats when traveling, and best practices start long before boarding the plane. Faculty, staff, students, and other travelers, please use this checklist to prepare yourselves — and your technology—for the unique threats of global travel.

Before You Leave

Physical Security

  • Be aware of national data protection laws in your home and destination countries.
  • Know and follow policies for using various devices, institutional data, and institutional resources.
  • Research personal, criminal, and cyber risks in the country or region you’re visiting.
  • Purchase and pack privacy screen filters, portable chargers, and country specific plug adapters.
  • Be aware that border and/or customs officials may search your devices multiple times and copy data therein.
  • Understand that legally confiscated electronic devices may not be returned for months.

Technical Security

  • Consult with your IT support professional about special concerns regarding your technology or your destinations.
  • Clemson highly recommends requesting a loaner device from your college or CCIT support center if possible.  Loaner devices will be encrypted, configured for travel and securely wiped upon return, as devices used abroad should be treated as potentially compromised. 
  • If a loaner device is not available or you choose to travel with your personal computer, ensure that all devices are encrypted (laptops, tablets, and phones) using BitLocker, FileVault, or native mobile-device encryption.  
  • Ensure your devices have full disk encryption when available and local encryption when not.
  • Verify that your device’s Operating System (OS) software is up to date.
  • Make sure your antivirus program is updated and performing regular scans.
  • Disable FaceTime and GoogleMeet since they can be mechanisms for “zero-click” attacks.
  • Check your cell phone coverage and international data plan options. If you need to access University systems through Duo and your cell phone will not be available, you can purchase a Duo fob from the CCIT Support Center as an alternative.
  • Enable your institution’s VPN access. Be aware some countries block VPN. Talk to your IT support for alternatives if needed.
  • Set up institutionally approved, centrally provisioned data storage.
  • Back up all data prior to travel, and take only essential data with you.

Cell Phones

  • Create complex passwords, PINS, codes, and screen locks for your device.
  • Clemson recommends that mobile devices be wiped and have the OS reloaded upon return to the country.
  • Install and test Duo Mobile on your phone before departure to ensure access to Clemson systems while abroad.  If needed, contact the CCIT Service Desk regarding bypass options for international travel.  You can additionally purchase a DUO fob from the service desk, but you should take extra care to keep these items in a safe location.
  • Check your cell phone coverage and international data plan options.
  • If you do not wish to bring or connect your cell phone while you travel, you can purchase a Duo fob from the CCIT Support Center as an alternative for DUO login. 

Data & Research Guidance

  • Try to only take Clemson data classified as “Public” according to Clemson’s Data Classification Standard.  If you must access Internal Use or Confidential data, please do so through Clemson’s encrypted VPN connection.  You may also connect to this data by utilizing CUApps, ensuring that data is not downloaded to your local device. 
  • Do not access Restricted Data while traveling abroad.  
  • Do not store confidential, regulated, export-controlled, unpublished research, CUI or sensitive personal information on travel devices.  If you regularly access this data, please contact the Research Compliance Office (ECRS) for more information on how to proceed. 
  • Use approved Clemson cloud services when access to additional files is needed.  

While Traveling

  • Regularly restart your devices to help remove implanted malware.
  • Always use Clemson’s VPN or CUAPPS, if available when accessing University email, research systems, cloud services, or any Clemson resource.
  • If VPN or CUAPPS are unavailable or disconnected, refrain from accessing Clemson systems until an encrypted connection can be reestablished.
  • Be aware that some countries will block certain cloud services.  This varies by country, but if Clemson VPN is available, this should help gain access to University resources.
  • Avoid public or unsecured Wi-Fi whenever possible.
  • Keep your devices near you/in view at all times.
  • Disable automatic Wi-Fi and Bluetooth connections.
  • Do not use unknown USB drives, charging stations, or accessories.
  • Assume devices and communications may be monitored while abroad.
  • Avoid using public device charging stations. Use only your own cables and chargers.
  • Enable Apple’s “Lockdown Mode” (for high-risk executives on iPhones).

Upon Returning

  • Treat all devices used internationally as potentially compromised.
  • Report instances in which you were required to be separated from your devices for any length of time.
  • Return loaner devices promptly for secure wiping/reimaging, and do not use them to access Clemson resources once back in the country.
  • Change Clemson passwords used during travel.
  • Report any lost, stolen, or suspicious device activity to CCIT immediately.
  • Provide feedback to your IT support professional on what did and did not work well.
  • Be aware that border and/or customs officials may search your devices multiple times and copy data therein.
  • Understand that legally confiscated electronic devices may not be returned for months.
  • Review banking and credit card statements for unauthorized transactions.
  • Provide feedback to your IT support professional on what did and did not work well.
  • Reestablish normal systems and safeguards with the help of your IT support professional.
  • Resume your weekly or monthly data check and back up routines as normal.
Report Security Incident

Quick Links