1. Michael Menne IT Solutions Chief Information Security Officer
National Cybersecurity Awareness Month Living in an Online World – Everyday Security
Michael Menne
IT Solutions
Chief Information Security Officer

3. Why is Information Security Critical?
New York Times
125 articles in 2013
700 articles in 2014
Verizon Data Breach Investigations Report (DBIR) 2015
70 Contributing Organizations
79,790 Security Incidents
2,122 Confirmed Data Breaches
Forbes
Ten-fold growth from 2012 to 2023
$60B to $639B
2013
2014
New York Times Articles
125
700+
Security Incidents
63,437
79,790
Data Breaches
1,367
2,122
Security Spending
$60 billion
(2012)
$639 billion (2023)
ITS Budget
$5.0 Million (FY14)
$4.8 Million (FY16)

4. What are the biggest risks to securing our data at Minnesota State?
Awareness and Education
Resources
Human
Capital
Recurring costs versus one-time costs
Old software and devices
Mobile Devices
Onerous legal requirements and processes
Industry statistics
$60B growth from 2012 to 2023
MSU isn’t growing at that pace. Our budgets are declining.
5.0B in 2013 to $4.8M in 2016

5. What are we doing right? Public Jobs, Private Data
StarID Password Requirements
System wide D2L Security Education Training
Information Privacy and Security Policy
Student Education Records Policy Review
Directory Data
Minnesota State System Office Policies, Procedures, Guidelines
Budget Prioritization
National Cybersecurity Awareness Month

6. National Cyber Security Awareness Month at MSU
Everyday Security - Four Ps
Passwords
Phishing
Patching
Protect your Devices
Cyber Security Guest Speaker Series
Dr. Christophe Veltsos aka Dr. InfoSec – Oct. 3
Jeff Evenson – Oct. 12
Ryan Manship – Oct. 19
Craig Munson – Oct. 26
Dr. Christophe Veltsos aka Dr. InfoSec – Oct. 3
Faculty at Minnesota State Mankato
Jeff Evenson – Oct. 12
Principal Security and Business Continuity Analyst at AgStar
Ryan Manship – Oct. 19
Practice Director at RedTeam Security
Craig Munson – Oct. 26
CISO – Minnesota State System Office

8. How can you help? Phishing

9. How can you help? Phishing
Don’t be an easy target!
Think before you click!
Be suspicious!
Dear user:
Money transfer
IMMEDIATE ACTION!
Within 2 hours, 75% of opened phishing s are clicked
92% compromised login/password

10. How can you help? Patching

11. How can you help? Patching
Unpatched systems = Easy targets
Keep software up to date
Windows Update
Apple Software Update
3rd party applications
Keep mobile devices up to date
Newer devices have monthly patches

12. How can you help? Protect your devices!

13. How can you help? Protect your devices!
Use IT Solutions Center to reimage technology devices when purchased, moved, or transferred
Use IT Solutions Center to recycle old technology
Keep track of all devices at all times
Especially mobile devices
Use only apps from trusted app stores
Google Play
Apple App Store
Microsoft Store

14. 00711891 Purchased: August 1992 Sold: October 1999
Found: September 2016

15.
Purchased: July 1996
Lost: August 2003
Found: September 2016

16. How can you help? Everyday Security
All month long
Promote National Cyber Security Awareness Month within each division / college
Promote National Cyber Security Awareness Month with peers at other institutions
All year long
Partner with IT Solutions Information Security to improve our data practices and reduce risk to our data
Watch for s from IT Solutions Center
Watch IT Solutions Information Security website
Join IT Solutions for a Data Privacy Day event in Jan. 2017

17. Questions