Posts

You are not powerless against online threats and attacks. In fact, a few simple actions can make a big difference toward securing your data and devices. For Cybersecurity Awareness Month, the Information Security Office will share some resources to get you started.

The U will upgrade the Cisco Secure Email Encryption Service to make it easier to access encrypted emails. Email recipients will no longer need to create a CSEES account to access encrypted emails and attachments.

Acceptable Use Rule (4-004A) defines acceptable, unacceptable, and legitimate uses of the university’s technology.

On August 8, 2022, UIT will deploy KnowBe4’s Phish Alert Button to all UMail accounts at the University of Utah and University of Utah Health. The button enables users to more easily report phishing messages and other suspicious emails.

Policy 4-004 outlines all the university’s IT security rules, which help protect the university, its IT systems and resources, and data. It also ensures compliance with local, national, and international laws, industry regulations, and business agreements.

The U’s Information Security Office (ISO) recently launched the Phish Tank, an awareness and educational website with information on phishing tactics and common red flags. Examples of known phishing attacks are coming soon.

Personally identifiable information (PII) should not be handled via email because it is an inherently insecure mechanism to transmit and receive restricted and sensitive data.

The Information Security Office (ISO) offers a variety of cybersecurity training and resources for University of Utah and University of Utah Health employees through their respective HR training platforms and KnowBe4.

U organizations must ensure that software purchased, leased, or developed by the university is reviewed for compliance with IT security requirements and accessibility requirements for persons with disabilities.

The goal of the U’s phishing and cybersecurity awareness efforts is to educate employees (and soon, students) in a safe practice environment about phishing, social engineering, and other online threats so they can better protect themselves and the university against increasingly brazen criminals.