Security Hardening through Awareness August 2018 WOU CyberSecurity Security Hardening through Awareness August 2018

E-mail Standard E-mail delivery is an insecure form of communication If you don’t want it printed in the newspaper, don’t send by standard e-mail WOU subscribes to Cisco Registered Envelope Service Outgoing E-mail will be delivered encrypted if: E-mail is sent using your Wou e-mail account #SECURE# is used in the subject line or An SSN or Credit card number is used in the body of the e-mail

E-mail blocked during the last week by: Reputation – 2,535,242 (top offender: cpro20.com) Invalid recipients – 197 Spam detected – 55,770 Virus Detected – 4 Malware – 3 Malicious URLs – 1,808 Content – 67 – (know bad users, machines or subject lines) These numbers were recorded in August 2018

E-mail Phishing Phishing -- fraudulent attempt to obtain sensitive information These scams attempt to trick recipients into responding or clicking immediately, by claiming they will lose something (for example, email access, bank account) University Computing Services will “never” ask you for your login credentials Spear-phishing This type of attack is directed at specific individuals The perpetrator knows more about you, making the request sound more believable

Passwords Use different passwords for each secure site There is a wou portal group called password security Password security reports sites where your security has been breached Password manager PasswordSafe, dashlane, keeper Your password can be changed by using https://wou.edu/accountlookup An alternative is to visit the service request desk in ITC009 Ucs will never give you your password by phone or e-mail Two factor authentication is available for sensitive access requirements

Protecting your computer Malware, popups & Ransomware There is significant threat of infection, when visiting Pornographic or Beer websites Sophos/intercept X does an excellent job of reporting threats and in most cases automatically remediates Beware of people calling you and reporting to be from support They may ask to take control of your computer ??? If you find a flash drive that doesn’t belong to you, do not attempt to use it

Physical security The Wou network has significant security protection built into it If you take a work laptop home, that same security environment will not be protecting you If your laptop must be left in a vehicle, secure it physically and virtually Encrypt sensitive files Use two factor authentication to access the computer Don’t tape your credentials to your monitor or the top of your desk

Information security Data stored on Google Drive is not backed up This project is in the current queue