Help your workforce and students protect their tech

Set up 2FA or physical log-in keys for institutional log-ins.
Provide phishing protections on institutional email.
Purchase enterprise accounts for password managers.
Purchase enterprise accounts for a data removal service. Prominent options include DeleteMe and Incogni.
Document a device encryption policy. Offer tools for employees and students to encrypt their devices.

Implement web and media policies

Create opt-in policies for mentions by name, appearing in photos, and account tagging on institutional social media posts and websites.
Create opt-in systems for appearing in institutional directories. Give students and employees a choice in the level of detail shared.
Provide training for online security practices and create a policy around regular training.
Default to opt-in systems for photographs at in-person events.
Create a virtual event policy that gives attendees time to change their names, turn off their cameras, or leave altogether before recording starts.
Ensure contact info from event registrations and meetings are accessible only on a need-to-know basis.
Make students aware of how to place a FERPA Block to prohibit the release of their directory information.

Create and share an institutional policy around bullying, discrimination, and online harassment, including how to escalate reports internally and request workplace/classroom accommodations.
Create templates for public statements, reports to social media platforms, data removal requests, and internal announcements to prepare for future emergencies.
Create a digital safety team so employees and students know who to turn to in case of online harassment.
Create an emergency workflow to help people remove information from institutional websites in case of harassment.
Create and share resources to help document abusive interactions and screen messages in case of harassment.
Ensure your institution is ready to draw on a crisis communications expert in emergency situations.
Ensure your institution is ready to draw on legal advice from professionals who understand state-specific laws on harassment and cyberbullying.

Provide training for social media and internet conduct on institutional accounts, as well as project- or lab-specific accounts.
Maintain institutional social media accounts only where you have the resources to manage them in case of emergencies.
Ensure you have an employee whose job responsibilities include surveying social media to proactively identify relevant disinformation campaigns, especially around areas of work focusing on health equity and marginalized communities.

Create offline opportunities for professional networking and development.
Support offline networking and professional development opportunities specifically for people from underrepresented backgrounds in public health.
Use institutional communication channels to highlight work against racism, ableism, classism, transphobia, homophobia, and other forms of systemic oppression.
Give all employees and students access to institutional email addresses, phone numbers, and mailing addresses for use in conference registration, journal submission, etc.
Provide graduating students with an email address to use during a transition period as they leave your institution.