16
+1-215-667-8990
HARDWARE
• Keep all hardware on the computer updated and patched with the latest
firmware and updates provided by the computer manufacturer
• All storage devices that contain recordings from the goggles
should be encrypted in transit and at rest
• Prevent unauthorized physical access to your computer using locked
doors, proper security practices, and awareness of your surroundings
• Limit physical access to the machine and if necessary in high
traffic areas--do not expose any unnecessary ports
• Only allow authorized USB devices to connect to your computer at the hardware level
• Maintain updated BIOS and motherboard firmware
• Implement a strong BIOS password management system to secure hardware
• Provide physical locks on computers and their ports to minimize tampering
• Block any unknown USB devices from connecting to the computer
• Physically inspect web cameras and their connections to the computer to
confirm there are no skimming devices that could intercept the USB signal
• Connect the cameras to only known and trusted USB hubs and/or dongles.
• Keep computers and connected systems secure by implementing
NIST-validated procedures and recommendations
• Disconnect any computer known to have any security
vulnerability and refresh to factory/organization defaults
• Do not save recordings to unsecured machines
• Do not leave laptops or tablets unattended
• Ensure storage of videos is HIPAA compliant
• Confirm all computers, networks, and servers have their traffic encrypted
SOFTWARE
• Update OBS software only to verified versions listed on the Vestibular First
(manufacturer) website and do not use unknown or untested beta versions
• Grant the minimum necessary rights for the shortest
duration possible to the logged in user
• Limit access to computer through the authentication of all users