1. 1 Ben Woelk RIT Information Security Office Advancing Digital Self Defense Establishing a Culture of Security Awareness at the Rochester Institute of Technology

2. 2 Copyright and Reuse The Digital Self Defense logo is the property of the Rochester Institute of Technology and is licensed under the Creative Commons Attribution-NonCommercial-NoDerivs License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nc-nd/2.0/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA. To request permission for other purposes, contact infosec@rit.edu. The course materials are the property of the Rochester Institute of Technology and are licensed under the Creative Commons Attribution-NonCommercial-ShareAlike License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nc- sa/2.0/ or send a letter to Creative Commons, 559 Nathan Abbott Way, Stanford, California 94305, USA. To request permission for other purposes, contact infosec@rit.edu.

3. 3 Challenges Who is RIT? At least 3 different audiences Various degrees of internet knowledge –Not everyone is technology savvy 2500 new students each year; 15,000 total 3000 faculty and staff

4. 4 Our Approach GAIN Target audiences with different communications tools Orientation Facebook Events and contests TRAIN Digital Self Defense workshops MAINTAIN Website and printed materials –Awareness materials Advisories and alerts

5. 5 Orientation Freshmen Orientation 90-minute time slot Three sections –Information Security –Copyright and Illegal File Sharing –Safe Social Networking Technical presenters partnered with Student Affairs

6. 6 Facebook Presence Information Security Facebook –19,000+ RIT Facebook accounts –Set up as Group, not Profile –Current issues Safe social networking info Threats and vulnerabilities

7. 7 Special Events National Cyber Security Awareness Month Speakers –Technical and non-technical Poster Contest DHS MS-ISAC National Webcast Initiative

8. 8 Awareness Contest Support desktop and password standards Email and poster marketing campaign Prizes Awareness website Quiz Contest drawing

9. 9 Digital Self Defense Three Workshops DSD 101—Introduction DSD 102—Desktop Security Software DSD 103—Information Handling

10. 10 Digital Self Defense 101 Introduction to Digital Self Defense General overview of how to practice safe computing and protect yourself and others Online threats Balance technical solutions and common sense

11. 11 Digital Self Defense 102 Desktop Security Software Detailed look at software tools needed to meet the requirements of the Desktop Security Standard Software simulation allows users to experience installation and use of security software

12. 12 Digital Self Defense 103 Information Handling Protect important information belonging to you or RIT Impact of legislative mandates Identify RIT Confidential information Information Lifecycle –Creation, Transfer, Storage, Disposal

13. 13 Information Security Website Alerts and Advisories Standards User Guides Event Announcements

14. 14 Awareness Brochures Support RIT requirements Discuss common issues and concerns –Desktop Standard –Passwords –Wireless –Instant Messaging –Avoiding Identity Theft

15. 15 Advisories and Alerts Email to students, staff, and faculty when absolutely necessaryEmail to students, staff, and faculty when absolutely necessary –Viruses and other malware –Spoofing, phishing and other online scams –Patching Message CenterMessage Center

16. 16 Summary One size doesn’t fit all Multi-year process (5+ years) Balance frequency of communications Make information security fun Prizes make great motivators

17. 17 Questions & Comments Send questions to infosec@rit.edu infosec@rit.edu