Cyber & IT Supervisory Forum - Additional Resources

TLP:GREEN

13.9.2 Ask Why And How If the business insists, ask questions. You have a right to know why it is necessary to supply your SSN and how it will be handled. Here are some questions:

Why is having my SSN necessary?



 With whom will you share my SSN with if I provide it?  How will my SSN be stored? Will it be encrypted?  Do you have a privacy policy, and may I see it?  Will you cover my liability or losses if my SSN is stolen or compromised? o

Unfortunately, if you are asked to supply your SSN by a business or institution that does not need it and you say no, it can refuse to supply services to you or put conditions on the service — such as a deposit or added fees. However, the question to always ask is “do I want to do business with a business that does not care about my privacy concerns?”

13.9.3 Leave Your Card At Home Do not carry your card around with you in your wallet or purse.

 Do not enter it into your phone, laptop, or other device. It is unlikely you will need your card and when you do need it, it does not come as a surprise.

13.9.4 Shred Mail And Documents Discarded mail and documents are easy places for identity thieves to search. Do not just throw out papers that hold personal details such as your SSN.  Get a shredder at a discount or office supply store and use it on a regular basis.  Do not leave mail in an outside mailbox for prolonged periods. Stealing mail is another way a thief can make off with your identity. 13.9.5 Do Not Use Your SSN As A Password Do not use the whole number — or part of it — as a password for anything! The password file can be stolen and decrypted, or someone can just watch you type it in from over your shoulder.  Also, if you need to require it for legitimate purposes in a public place, be careful who may be able to eavesdrop on your conversation. 13.9.6 Do Not Send Your SSN Electronically Never type your SSN into an email or instant message and send it. Most email messages can be intercepted and read in transmission.  Also, do not leave a voice mail that includes your SSN. If you need to contact someone and give them your number, it is always best to do so in person.  If you need to do so on the phone, ensure you are speaking to the right person, so you are not swindled. 13.9.7 Do Not Give Your SSN Out You should never supply your SSN to someone you do not know who calls you on the phone and requests it. This same warning applies to unsolicited emails and any forms you fill out on the internet.

TLP:GREEN