Foreign Travel Process Improvements

• Establish a policy to protect SLAC-owned IT devices and systems during foreign travel 
• Create a clear, user-friendly process for SLAC personnel 
• Ensure transparency for SLAC stakeholders

Risks | SLAC systems face threats from:

• Hostile governments
• Foreign intelligence services
• Terrorist or criminal groups
• Disgruntled employees
• Malicious intruders

Common risks include:

• Targeted attacks (phishing, compromised websites)
• Network surveillance 
• Hardware tampering/confiscation (e.g., in hotel rooms)

Mitigations | When traveling with SLAC-owned IT devices, personnel must:

• Users are required to submit their own Foreign Travel with IT Request form 14 days before departure (NEW PROCESS)
• Limit access to sensitive data (e.g., PII, financial):
  • Remove unnecessary sensitive data 
  • Use VPN for secure access
• Keep system software up to date 
• Run SLAC-approved anti-malware tools 
• Avoid lending devices to others

• Turn off devices when not in use

   

• Foreign Travel with IT Request form is required for international travel with SLAC-owned devices.
• Loaner laptops are mandatory when traveling to sensitive countries
• Personal devices cannot be used for SLAC work unless connected through an authorized service gateway (applicable to non-sensitive countries only).

• Failure to obtain travel authorization for a sensitive country will result in:

  • Blocked access to SLAC systems and accounts
  • Potential disciplinary actions, up to and including termination

   

• Acceptable Use of Information Technology Resources Policy 
• Incidental Use of Personally Owned Computers 
• SLAC Travel Policies 
• SLAC Off-Site Use of Property 
• SLAC Travel Office 
• SLAC Travel | Sensitive Countries
• Foreign Travel | SLAC Counterintelligence 
• Clearance Holder Reporting Requirements | SLAC Counterintelligence 
• Stanford UIT Recommendations for International Travel 

• DOE Sensitive Country Definition