9/20/07 STLSecurity is Everyone's Responsibility 1 FHDA Technology Security Awareness

9/20/07 STLSecurity is Everyone's Responsibility 2 Your Responsibilities Guarding against compromises Storing confidential information Physical security Social engineering Wireless networking Internet and Lost or stolen equipment Unauthorized access to computers

9/20/07 STLSecurity is Everyone's Responsibility 3 Your Responsibilities Continued Passwords Sending confidential information –CIVIL CODE SECTION (Breach Law) Definition –FERPA Definition Traveling with District owned computing devices Resources

9/20/07 STLSecurity is Everyone's Responsibility 4 Beware of the Social Engineer! –Social engineering is still the #1 way to bypass security –Be suspicious if anybody asks you for: Your password Credit card numbers Your co-workers names or extensions Your salary Information about your projects If anybody calls claiming to represent management or to know a colleague

9/20/07 STLSecurity is Everyone's Responsibility 5 Privacy Takes Center Stage Privacy and identity theft is a hot issue Disclosure laws are in effect Phishing through phone calls and Education and vigilance are still the best ways to maintain privacy

9/20/07 STLSecurity is Everyone's Responsibility 6 Physical Security Every Computing Device should be locked to the work surface. Lock up Data Backup CDs, DVDs and USB/Key drives. Secure Areas at the District: –De Anza L7 Data Center; FH ADMIN Data Room –Mechanical and Telecommunication Closets –Admissions and Records –Human Resources –Business Services, etc. If someone needs access, especially a vendor, call ETS for access - Call Center x8324 Don’t prop open doors or let people in behind you. Challenge strangers - if you are uncomfortable with this, call campus police FH x7313, DA x5555 Escort all visitors all the time

9/20/07 STLSecurity is Everyone's Responsibility 7 Basic Desktop/Laptop Security Never turn off the Auto Virus checking or Auto Update for the Virus software. Never turn off the Operating System Auto Update. Screen Lock your system when you walk away from your desk Physically lock all computers (especially laptops) to your work surface with the locking cable that was purchased with your computer. Use a system password upon boot up. Shut down your computer when you leave. If you use sleep mode – make sure you set a password for ‘wakeup’. Keep track of portable devices especially USB Key Drives. Traveling with a laptop, lock in hotel room safe when away from the room or have in you line of sight at all times (Airport security ; Never send a laptop or computing device through checked luggage.) CONTACT ETS FOR ASSISTANCE ON ALL OF THE ABOVE: CALL CENTER: X8324,

9/20/07 STLSecurity is Everyone's Responsibility 8 Shared Resources Awareness Resource sharing can be dangerous if you don’t know your computer is set to share files. This means know your computer’s capabilities and use them cautiously: –If you must share a file only do it when needed, then turn it off. –Never set your computer to share its network connection with other devices using the built in wireless capability. The District Network is a shared resource –Knowing the proper use of a Hardwire network connection vs.. a Wireless connection –Why can’t I use wireless to access the ADMIN system? Be aware of copyright laws vs.. fair use when sharing and showing information collected from the Internet.

9/20/07 STLSecurity is Everyone's Responsibility 9 Account and Password Security Everyone has their own account – it’s your personal identity – don’t share it! Nobody is allowed to know your password except you and don’t write them down on a postit and stick it under your desk. Create Strong Passwords Change them often Use different passwords for work and home

9/20/07 STLSecurity is Everyone's Responsibility 10 Protecting The FHDA Network Do not put the college at risk by bad behavior on the Internet (downloading files which may contain malware or viruses) Do not post information on the Internet that may be confidential, illegal, or violate privacy laws (Its very easy to post something to your district webpage for a class) Do not download software that violates copyright laws Do not unplug District Owned computing devices from the network and connect personally owned machines. If you see it report it to ETS Do not bring in network hubs for extra ports – this can bring down networks, and be hard to track down

9/20/07 STLSecurity is Everyone's Responsibility 11 Review of the District’s Information Security Best Practices Guide Storing confidential information Ensuring the physical security of computers, data, and documents Using the Internet and Responding to lost / stolen equipment or unauthorized access to computers Using passwords

9/20/07 STLSecurity is Everyone's Responsibility 12 Best Practices continued Sending confidential information –1.CIVIL CODE SECTION (Breach Law) Definition –FERPA Definition - accessing at work and from offsite –mail.fhda.edu –meetingmaker.fhda.edu Resources

9/20/07 STLSecurity is Everyone's Responsibility 13 Questions? Call Center x8424