Information Technology Awareness

1. Information TechnologyAwareness Wayne Donald IT Security Officer

2. Why Education and Awareness • There is a mentality that there’s nothing important on the machine • There is a misconception that technology alone can solve the security problems • There is an increase in “social engineering” - deceptive practices to obtain information • There is a need to recognize internal threats as well as the external threats

3. Education and Awareness • Create an awareness among our user community • Change beliefs, attitudes, and the behavior of users • The central support organization needs to hear from users

4. IT Security Office Typical Mission Statement: ……to provide technology tools, education, awareness, and guidance necessary for the agency to work towards a safe and secure technology environment for teaching and learning, research, outreach, and the conduct of university business.

5. IT Security Office • Ensure educational and promotional programs • Provide technology tools • Maintain a central web site • Work closely with other support offices • Evaluate policies and procedures • Coordinate BIA/RA process • Coordinate Business Recovery Plans

6. Security Awareness Program • Implement a regular backup routine • Consider physical security a priority • Install anti-virus software for protection • Know the web sites you utilize • Select a password that ensures privacy • Be aware of email exposures and danger

7. Security Web Site • Site at VA Scan Security WWW site • Four main sections: • Know The Rules • Play It Safe • Lock It Down • Go To Class • Daily security updates and news • Reference to security organizations

8. What’s In The Future • Expand the security programs and offerings • Continue with awareness and education • New and improved system and security tools • Review policies and procedures • Improve offerings on the security web site • Seek input from our user community SECURITY IS EVERYBODY’S BUSINESS