Information Technology Awareness Wayne Donald IT Security Officer
Why Education and Awareness There is a mentality that theres nothing important on the machine There is a mentality that theres nothing important on the machine There is a misconception that technology alone can solve the security problems There is a misconception that technology alone can solve the security problems There is an increase in social engineering - deceptive practices to obtain information There is an increase in social engineering - deceptive practices to obtain information There is a need to recognize internal threats as well as the external threats There is a need to recognize internal threats as well as the external threats
Education and Awareness Create an awareness among our user community Create an awareness among our user community Change beliefs, attitudes, and the behavior of users Change beliefs, attitudes, and the behavior of users The central support organization needs to hear from users The central support organization needs to hear from users
IT Security Office Typical Mission Statement: ……to provide technology tools, education, awareness, and guidance necessary for the agency to work towards a safe and secure technology environment for teaching and learning, research, outreach, and the conduct of university business.
IT Security Office Ensure educational and promotional programs Ensure educational and promotional programs Provide technology tools Provide technology tools Maintain a central web site Maintain a central web site Work closely with other support offices Work closely with other support offices Evaluate policies and procedures Evaluate policies and procedures Coordinate BIA/RA process Coordinate BIA/RA process Coordinate Business Recovery Plans Coordinate Business Recovery Plans
Security Awareness Program Implement a regular backup routine Implement a regular backup routine Consider physical security a priority Consider physical security a priority Install anti-virus software for protection Install anti-virus software for protection Know the web sites you utilize Know the web sites you utilize Select a password that ensures privacy Select a password that ensures privacy Be aware of exposures and danger Be aware of exposures and danger
Security Web Site Site at VA Scan Security WWW site Site at VA Scan Security WWW siteVA Scan Security WWW siteVA Scan Security WWW site Four main sections: Four main sections: –Know The Rules –Play It Safe –Lock It Down –Go To Class Daily security updates and news Daily security updates and news Reference to security organizations Reference to security organizations
Whats In The Future Expand the security programs and offerings Expand the security programs and offerings Continue with awareness and education Continue with awareness and education New and improved system and security tools New and improved system and security tools Review policies and procedures Review policies and procedures Improve offerings on the security web site Improve offerings on the security web site Seek input from our user community Seek input from our user community SECURITY IS EVERYBODYS BUSINESS