1. Security Hardening through Awareness August 2018
WOU CyberSecurity
Security Hardening through Awareness
August 2018

2. E-mail Standard E-mail delivery is an insecure form of communication
If you don’t want it printed in the newspaper, don’t send by standard
WOU subscribes to Cisco Registered Envelope Service
Outgoing will be delivered encrypted if:
is sent using your Wou account
#SECURE# is used in the subject line or
An SSN or Credit card number is used in the body of the

3. E-mail blocked during the last week by:
Reputation – 2,535,242 (top offender: cpro20.com)
Invalid recipients – 197
Spam detected – 55,770
Virus Detected – 4
Malware – 3
Malicious URLs – 1,808
Content – 67 – (know bad users, machines or subject lines)
These numbers were recorded in August 2018

4. Phishing
Phishing -- fraudulent attempt to obtain sensitive information
These scams attempt to trick recipients into responding or clicking immediately, by claiming they will lose something (for example, access, bank account)
University Computing Services will “never” ask you for your login credentials
Spear-phishing
This type of attack is directed at specific individuals
The perpetrator knows more about you, making the request sound more believable

5. Passwords Use different passwords for each secure site
There is a wou portal group called password security
Password security reports sites where your security has been breached
Password manager
PasswordSafe, dashlane, keeper
Your password can be changed by using
An alternative is to visit the service request desk in ITC009
Ucs will never give you your password by phone or
Two factor authentication is available for sensitive access requirements

6. Protecting your computer
Malware, popups & Ransomware
There is significant threat of infection, when visiting Pornographic or Beer websites
Sophos/intercept X does an excellent job of reporting threats and in most cases automatically remediates
Beware of people calling you and reporting to be from support
They may ask to take control of your computer
???
If you find a flash drive that doesn’t belong to you, do not attempt to use it

7. Physical security
The Wou network has significant security protection built into it
If you take a work laptop home, that same security environment will not be protecting you
If your laptop must be left in a vehicle, secure it physically and virtually
Encrypt sensitive files
Use two factor authentication to access the computer
Don’t tape your credentials to your monitor or the top of your desk

8. Information security Data stored on Google Drive is not backed up
This project is in the current queue