National Cybersecurity Awareness Month Living in an Online World – Everyday Security

1. National Cybersecurity Awareness MonthLiving in an Online World – Everyday Security Michael Menne IT Solutions Chief Information Security Officer

3. Why is Information Security Critical? • New York Times • 125 articles in 2013 • 700 articles in 2014 • Verizon Data Breach Investigations Report (DBIR) 2015 • 70 Contributing Organizations • 79,790 Security Incidents • 2,122 Confirmed Data Breaches • Forbes • Ten-fold growth from 2012 to 2023 • $60B to $639B

4. What are the biggest risks to securing our data at Minnesota State? • Awareness and Education • Resources • Human • Capital • Recurring costs versus one-time costs • Old software and devices • Mobile Devices • Onerous legal requirements and processes

5. What are we doing right? • Public Jobs, Private Data • StarID Password Requirements • System wide D2L Security Education Training • Information Privacy and Security Policy • Student Education Records Policy Review • Directory Data • Minnesota State System Office Policies, Procedures, Guidelines • Budget Prioritization • National Cybersecurity Awareness Month

6. National Cyber Security Awareness Month at MSU • Everyday Security - Four Ps • Passwords • Phishing • Patching • Protect your Devices • Cyber Security Guest Speaker Series • Dr. Christophe Veltsos aka Dr. InfoSec – Oct. 3 • Jeff Evenson – Oct. 12 • Ryan Manship – Oct. 19 • Craig Munson – Oct. 26

8. How can you help? Phishing

9. How can you help? Phishing • Don’t be an easy target! • Think before you click! • Be suspicious! • Dear e-mail user: • Money transfer • IMMEDIATEACTION! • Within 2 hours, 75% of opened phishing e-mails are clicked • 92% compromised login/password

10. How can you help? Patching

11. How can you help? Patching • Unpatched systems = Easy targets • Keep software up to date • Windows Update • Apple Software Update • 3rd party applications • Keep mobile devices up to date • Newer devices have monthly patches

12. How can you help? Protect your devices!

13. How can you help? Protect your devices! • Use IT Solutions Center to reimage technology devices when purchased, moved, or transferred • Use IT Solutions Center to recycle old technology • Keep track of all devices at all times • Especially mobile devices • Use only apps from trusted app stores • Google Play • Apple App Store • Microsoft Store

14. 00711891 • Purchased: August 1992 • Sold: October 1999 • Found: September 2016

15. 00885648 • Purchased: July 1996 • Lost: August 2003 • Found: September 2016

16. How can you help?Everyday Security • All month long • Promote National Cyber Security Awareness Month within each division / college • Promote National Cyber Security Awareness Month with peers at other institutions • All year long • Partner with IT Solutions Information Security to improve our data practices and reduce risk to our data • Watch for e-mails from IT Solutions Center • Watch IT Solutions Information Security website • https://www.mnsu.edu/its/security • Join IT Solutions for a Data Privacy Day event in Jan. 2017

17. Questions