Background

Overseas travel provides UVA faculty, staff, and students with the opportunity to leverage invaluable foreign partnerships to advance collaborative research and enhance learning experiences abroad.  UVA encourages foreign travel for these purposes, but also seeks to ensure UVA employees and students are aware of some of the risks that accompany travel abroad.

Foreign travel can provide maligned foreign actors (nation state collectors, academic competitors, commercial entities, criminals) an opportunity to target individuals involved in U.S. based research activities in ways that are less likely to occur within the U.S.  Interpersonal elicitation, physical access to electronic devices, and foreign communications infrastructure are some vectors that malign foreign actors can exploit to gain access to sensitive U.S. research, especially in the areas of Critical Emerging Technologies (CET).

Other UVA Support Offices

UVA's International Studies Office is a valuable resource for all foreign travel related questions. 

UVA Information Security also provides best practices around International Travel and Device Security.

Guidance

 

Pre-Travel:

  • File a Temporary Export Request Form if you intend to travel with University electronic devices, discuss/present research data or access University systems while abroad. Provide detailed information regarding foreign collaborators, sponsors, host institutions, and any research data to be shared for appropriate screening against restricted‑party and/ or sanctions lists.
  • Request a "clean" loaner laptop or mobile phone from your school / department Local Support Partner (LSP).  Ensure all electronic devices have updated software, antivirus and firewall protections.
  • Take only the devices and data essential for the trip. Avoid bringing or accessing high-risk or sensitive research data.
  • Back up any data you intend to take abroad before traveling; should your device be confiscated, lost or stolen, your data will be stored safely elsewhere.
  • Keep digital and hard copies of your passport and visas separate from the originals (e.g., a digital and hard copy in a secure location which is accessible while you are travelling if needed, and one with a trusted contact at home).
  • Ensure a trusted contact in the United States knows your itinerary (in addition to your University foreign travel notification).
  • Determine if your cellular phone service provider requires notification of overseas travel prior to departure.  Acquiring a foreign sim card / e-sim at your destination may be a more economical means of obtaining cellular service overseas, especially if you will be abroad for an extended period.
  • Notify your bank / credit union / credit card companies that you will be traveling to facilitate overseas transactions.  Many financial institutions allow this notification to be completed online.
  • Ensure you have been appropriately vaccinated for the areas of intended travel and have an adequate supply of any required medications.
  • Research local customs and laws before departure via the U.S. Department of State International Travel Country Information.

 

During travel:

  • Assume any sensitive or proprietary information on a personal or electronic device could be compromised while overseas.  Do not or access export controlled, sensitive, non-public or proprietary research information while abroad.
  • Keep devices in your carry-on luggage and not in checked bags. Do not leave electronics unattended in hotel rooms, even in hotel room safes, as they may not be secure.
  • Enable remote-wipe and “find my device” features on electronics.
  • Avoid using public Wi-Fi or public charging kiosks (risk of "juice jacking").  Always use the University VPN to encrypt your internet traffic.  Disable Bluetooth and Wi-Fi when not in use.
  • Understand “secure” Wi-Fi may not be secure.  When provided a “secure” Wi-Fi connection with password, enter the wrong password and see the Wi-Fi still connects.
  • Power off electronic devices, remove from power source, and power back on devices at least once daily.
  • Use encryption for sensitive information and intellectual property.  Use multi-factor authentication to access devices / systems / accounts and adjust your screen lock time to a low setting.  Note: Some countries may have strict encryption and state secret laws that may require you to decrypt devices for inspection.
  • Do not engage in illegal or amoral (often regionally / culturally dependent) activities abroad that could make you susceptible to coercion or legal action.
  • Know the location of the U.S. Embassy and/or Consulate(s) in the location(s) you are travelling.
  • Be prepared to walk or take public transportation to this location if necessary.  If you are travelling to a country where there is known hostility toward the United States or instability in the region, have the number for the U.S. Embassy saved in your phone.
  • Stay in a group with other travelers if possible.  Avoid wearing clothing or carrying luggage with university or national affiliation displayed, avoid wearing expensive jewelry / watches, and do not carry large amounts of cash.
  • Maintain situational awareness in transport hubs, lobbies, and areas frequented by tourists.  Stay away from areas where there are protests / demonstrations.
  • Know the local number for calling emergency services - it is likely that it is NOT 911.  If you suffer from a serious medical condition, know the location of local hospitals at your destination location(s).
  • Be courteous and comply with requests during interactions with local government or law enforcement representatives.  If you are detained, ask to speak to a U.S. Embassy and host institution representative immediately.
  • If you believe you are under physical or electronic surveillance while overseas, DO NOT attempt to counter this activity.  Make a mental note of the circumstances and report the activity to U.S. authorities upon returning from your travel or abroad, or at a U.S. Embassy or Consulate, in person, if you are concerned for your safety.
  • Do not share travel plans or your location while overseas on social media. 

 

Post-travel

  • Upon return, ensure any electronic device taken with you overseas is not connected to a University system until it has been reviewed and scanned by your LSP / other University IT rep.
  • Report any anomalies with software, browser performance or history, battery usage, or device functionality.
  • Any external devices used in a foreign IT system or electronic device or provided by a foreign contact, should not be used in university IT systems / electronics.
  • Immediately change all passwords for professional and personal accounts you accessed while abroad.
  • Check for any unauthorized transactions in your credit card and bank card transaction history.
  • Report any suspicious incidents you encountered overseas to the UVA Office of Research Security ([email protected]).  UVA ORS can facilitate contact with appropriate federal, state, and local authorities if needed.

 

Helpful online references:

Review U.S. State Department advisories for your destination: https://travel.state.gov/en/international-travel.html

Enroll in U.S. State Department Smart Traveler Enrollment Program (STEP) for notifications and contact in case of an emergency: https://mytravel.state.gov/s/step

FCC - https://www.fcc.gov/consumers/guides/cybersecurity-tips-international-travelers

U.S. State Department travel planning - https://travel.state.gov/en/international-travel/planning/guidance.html

CDC Traveler’s Health - https://wwwnc.cdc.gov/travel/

Need Assistance?  
Matt Rader, Operational Security Program Manager