Information Security General Awareness Training Module 1 – Introduction For The UF HSC Workforce

Module 1 - Introduction 2 General Awareness: Information Security Prevent Risks Protect Information Threats

Module 1 - Introduction 3 Principles of Information Security

Module 1 - Introduction 4 What Are We Trying to Prevent? Violation of privacy Identity theft Loss of competitive advantage Loss of computer and network resources Copyright violations and other illegal uses

Module 1 - Introduction 5 What Must Be Protected? Servers and Networks Offices and Buildings Information Desktop and Portable Computers

Module 1 - Introduction 6 Protected From What Threats? Computer Accident or Hardware Failure Computer Hackers Weather Malware - Virus, Worm, Spyware Laptop, PDA Thieves Phishing Scams

Module 1 - Introduction 7 What Is Important?

Module 1 - Introduction 8 Individually identifiable health information; health information combined with name, or med record #, or address, or key dates, or family members, or any other information that would link a person to their health condition. What Kind of Information ? Protected Health Information (PHI)

Module 1 - Introduction 9 Individually identifiable student information; name or UF ID or SSN or photo, in combination with grades, demographics, admissions, schedules, class rosters, financial, or any information needed and used by our faculty and staff about our students, with the exception of a limited amount of directory information. Student Records What Kind of Information ?

Module 1 - Introduction 10 What Kind of Information ? Names combined with SSNs, or drivers license numbers or Florida Ids, or any Financial account numbers and access codes, or any other information that could be used to commit fraud using someone else’s identity. Personal Identification Information ( of anyone including faculty, staff, vendors and clients )

Module 1 - Introduction 11 Student Records Protected By Laws HIPAA FERPA Florida Statutes, Chapter (aka House Bill 481) Protected Health Information (PHI) Personal Identification Information (of anyone including faculty, staff, vendors and clients)

Module 1 - Introduction 12 Personal Identification Information (of anyone including faculty, staff, vendors and clients) Student Records MUST Be Safeguarded Wherever It is Used or Stored HIPAA FERPA Florida Statutes, Chapter (aka House Bill 481) Protected Health Information (PHI)

Module 1 - Introduction 13 Research Academic Business Other Important to UF HSC Needs To Be Safeguarded Too

Module 1 - Introduction 14 Summary Servers and Networks Thumb Drives Computer Hackers And Thieves Natural Disasters Different Types of Information Confidentiality, Integrity, Availability info

Module 1 - Introduction 15 Your Responsibilities Protect Information and our Computing Environment Learn and Practice Safeguards Review General Awareness Training Regularly