Two-Step Verification Presenter DATE

What is Two-Step Verification? A simple and very effective security feature used with HarvardKey to help protect your Harvard account even if your password is stolen Designed to make it more difficult for an impersonator to use Harvard credentials to access our systems Uses a second device, commonly a mobile phone, to verify your identity 1 Login to HarvardKey 2 Verify with Duo Help Keep Cyber Criminals Out

Why Require Two-step Verification? 11/14/2018 Why Require Two-step Verification? Harvard is a high priority target for hackers, including nation-states Stolen Harvard credentials are used to gain unauthorized access to systems This step will greatly enhance our information security, and help to protect, for example: SSN and direct deposit information research data and intellectual property faculty, staff, and student personal information Even if you don’t have direct access to sensitive information beyond your personal data, a cybercriminal who steals your account can leverage it to access additional Harvard information and systems. Harvard is a high priority target for hackers, including foreign nation state-sponsored entities who attempt to access University systems with ever-increasing sophistication and frequency. Two-step authentication is designed to provide an extra level of security, and to make it more difficult for an impersonator to use Harvard credentials to access our systems. This step will greatly enhance our information security, and help to protect direct deposit information, research data, and intellectual property, as well as faculty, staff, and student personal information. Your personal data like direct deposit account number and your Social Security Number. If a cybercriminal reaches this information, they can divert your paycheck or open new accounts in your name.   Your University data like sensitive research and administration information. The theft of this kind of information can result in lost grants, harm to critical research initiatives, and the exposure of private information about Harvard and its community. Other people's data at Harvard. Although you may not have direct access to sensitive information beyond your personal data, a cybercriminal who steals your account can leverage it to access additional accounts and systems that hold other people's information at Harvard. At Harvard, we detect almost 500 compromised accounts every month that are actively being abused/used to access Harvard resources – two-step verification will drastically reduce this number

When Will This Be Required? huit.harvard.edu/twostep/schedule for most up to date Population Required by… Users of HUIT VPN service September 28 Harvard Graduate School of Design Central Administration, Inter-faculty Initiatives, Allied Institutions October 5 Radcliffe Institute for Advanced Study October 12 Harvard Divinity School Harvard Division of Continuing Education (faculty/staff only) Faculty of Arts and Sciences, Paulson SEAS October 19 T.H. Chan School of Public Health November 1 Harvard Medical School (quad only) Graduate School of Education November 17 Harvard Business School, Harvard Business Publishing Harvard Kennedy School Harvard Law School

More information and step-by-step instructions: Questions/Concerns More information and step-by-step instructions: http://huit.harvard.edu/twostep