Lesson 2: Epic Security Considerations

Epic Security Considerations In this lesson you will learn: Password creation Security Considerations Where to find support material Safety measures Who to contact for security concerns

Epic Security Considerations Your username is assigned to you by the IS Department. Usernames can be similar, but they are never the same. William R. Smith’s username could be SMITHWR. Passwords must be at least eight characters in length and contain at least one number. No more than 32 characters, cannot be dictionary words, cannot be reused, and must contain at least one number. Your Epic password is the same as your Citrix/Network (also referred to as Active Directory) password.

Epic Security Considerations Remember to create strong passwords that use a mix of letters, numbers and punctuation. Be sure to make it something you can recall. No one should ever ask you for your password for any reason; never share your password with anyone. Report any suspicious activity to Information Services. ************************Correct phone number for IS Help Desk 8-7075. Slides 4-16****************************

Epic Security Considerations Passwords: - must have at least eight characters - must have no more than 32 characters Must have no more than 30 characters - must contain at least one number - must be changed every 180 days - cannot be reused If you feel your password has been compromised, change it immediately.

Epic General Security Awareness Use strong p@$$w0rdZ Hackers use tools that automatically try every word in the dictionary as your password. Choose longer, hard-to-guess passwords that contain a mix of letters, numbers, and punctuation. For easy-to-remember passwords, use a line from a poem, song, or movie.

Never give out your password. Epic General Security Awareness Never give out your password. Never, under any circumstances, should a user give out their password. Watch out for persons attempting to get your password or information through social engineering. Social engineering is a method by which a person impersonates or intimates others to get sensitive information. Report any such cases to Information Services 8-7075.

Destroy notes containing passwords. Epic General Security Awareness Destroy notes containing passwords. More and more, thieves are stealing computer files or passwords from their victims. Notes and post-it notes around your work area containing passwords, account numbers, or other confidential information make it too easy. Clean up!

Epic General Security Awareness Your username and password make up your electronic signature. CHKDS applications log actions in computer applications using an employee’s signature. If anything has your electronic signature stamped to it, you are responsible for it!

Lock it up to lock them out! Epic General Security Awareness Lock it up to lock them out! Never your leave your computer/applications open when you step away from your computer. Locking your PC will help to stop snooping passers-by when you leave your desk.

Don’t trust unexpected emails/files. Epic General Security Awareness Don’t trust unexpected emails/files. Most computer viruses enter the network when an employee opens an e-mail attachment. If an attachment arrives unexpectedly, verify who sent it before you open it. Never open attachments from strangers.

Stay in safe internet neighborhoods. Epic General Security Awareness Stay in safe internet neighborhoods. You recognize the dangers of wandering to the tough part of town. Web surfing works the same way. Malicious software is installed on victims’ computers from a number of unsafe sites. If a website does not look right… it probably is not!

Epic General Security Awareness Look before you click… Look carefully at links before you click them. Unless you intend to download software, no website/web address should have .exe in it. The “.exe” indicates an executable program, which could be malicious.

Epic General Security Awareness Just click “NO”! When you visit a website and a box asks, "Should I remember your password?”, click NO. The password is actually stored on your own computer. Anyone else using your computer can visit your ‘Favorites’ and login as you.

Report suspicious activity. Epic General Security Awareness Report suspicious activity. Is your computer is not performing as expected, are there more webpage pop-ups on your screen than clicked on, or you notice a program installing and you did not start the installation? These are examples of what is considered suspicious activity on a computer and could indicate that spyware, ad-ware or remote control programs have been installed without your permission or knowledge. If you experience any of these or other suspicious activity, please call the help desk at 8-7075.

Epic General Security Awareness When in doubt, call I.S. Information Services is here for you. If you ever have a question or need to notify us of a problem, give us a call at 8-7075. Only with your help can we maintain the privacy and security of our systems.

Click on the lock to advance to Lesson 3 End of Lesson 2 Click on the lock to advance to Lesson 3