1. Lesson 2: Epic Security Considerations

2. Epic Security Considerations
In this lesson you will learn:
Password creation
Security Considerations
Where to find support material
Safety measures
Who to contact for security concerns

3. Epic Security Considerations
Your username is assigned to you by the IS Department. Usernames can be similar, but they are never the same. William R. Smith’s username could be SMITHWR.
Passwords must be at least eight characters in length and contain at least one number. No more than 32 characters, cannot be dictionary words, cannot be reused, and must contain at least one number.
Your Epic password is the same as your Citrix/Network (also referred to as Active Directory) password.

4. Epic Security Considerations
Remember to create strong passwords that use a mix of letters, numbers and punctuation. Be sure to make it something you can recall.
No one should ever ask you for your password for any reason; never share your password with anyone.
Report any suspicious activity to Information Services.
************************Correct phone number for IS Help Desk Slides 4-16****************************

5. Epic Security Considerations
Passwords:
- must have at least eight characters
- must have no more than 32 characters
Must have no more than 30 characters
- must contain at least one number
- must be changed every 180 days
- cannot be reused
If you feel your password has been compromised, change it immediately.

6. Epic General Security Awareness
Use strong
Hackers use tools that automatically try every word in the dictionary as your password. Choose longer, hard-to-guess passwords that contain a mix of letters, numbers, and punctuation. For easy-to-remember passwords, use a line from a poem, song, or movie.

7. Never give out your password.
Epic General Security Awareness
Never give out your password.
Never, under any circumstances, should a user give out their password. Watch out for persons attempting to get your password or information through social engineering.
Social engineering is a method by which a person impersonates or intimates others to get sensitive information. Report any such cases to Information Services

8. Destroy notes containing passwords.
Epic General Security Awareness
Destroy notes containing passwords.
More and more, thieves are stealing computer files or passwords from their victims. Notes and post-it notes around your work area containing passwords, account numbers, or other confidential information make it too easy. Clean up!

9. Epic General Security Awareness
Your username and password make up your electronic signature.
CHKDS applications log actions in computer applications using an employee’s signature. If anything has your electronic signature stamped to it, you are responsible for it!

10. Lock it up to lock them out!
Epic General Security Awareness
Lock it up to lock them out!
Never your leave your computer/applications open when you step away from your computer. Locking your PC will help to stop snooping passers-by when you leave your desk.

11. Don’t trust unexpected emails/files.
Epic General Security Awareness
Don’t trust unexpected s/files.
Most computer viruses enter the network when an employee opens an attachment. If an attachment arrives unexpectedly, verify who sent it before you open it.
Never open attachments from strangers.

12. Stay in safe internet neighborhoods.
Epic General Security Awareness
Stay in safe internet neighborhoods.
You recognize the dangers of wandering to the tough part of town. Web surfing works the same way. Malicious software is installed on victims’ computers from a number of unsafe sites. If a website does not look right… it probably is not!

13. Epic General Security Awareness
Look before you click…
Look carefully at links before you click them. Unless you intend to download software, no website/web address should have .exe in it. The “.exe” indicates an executable program, which could be malicious.

14. Epic General Security Awareness
Just click “NO”!
When you visit a website and a box asks, "Should I remember your password?”, click NO. The password is actually stored on your own computer. Anyone else using your computer can visit your ‘Favorites’ and login as you.

15. Report suspicious activity.
Epic General Security Awareness
Report suspicious activity.
Is your computer is not performing as expected, are there more webpage pop-ups on your screen than clicked on, or you notice a program installing and you did not start the installation?
These are examples of what is considered suspicious activity on a computer and could indicate that spyware, ad-ware or remote control programs have been installed without your permission or knowledge.
If you experience any of these or other suspicious activity, please call the help desk at

16. Epic General Security Awareness
When in doubt, call I.S.
Information Services is here for you. If you ever have a question or need to notify us of a problem, give us a call at Only with your help can we maintain the privacy and security of our systems.

17. Click on the lock to advance to Lesson 3
End of Lesson 2
Click on the lock to advance to Lesson 3