Archives - Information Technology Services /its/category/security-2/cyber-security-month/ 杏吧原创 University Thu, 24 Aug 2023 14:02:42 +0000 en-US hourly 1 https://wordpress.org/?v=6.3.1 A Student Perspective on our Brightspace Security Awareness Course! /its/2022/student-perspective-brightspace-security-awareness-course/?utm_source=rss&utm_medium=rss&utm_campaign=student-perspective-brightspace-security-awareness-course Fri, 28 Oct 2022 16:18:12 +0000 /its/?p=30852 The Security Awareness course, offered through Brightspace, is a complete foundational training program that covers a wide array of cyber security topics. This includes social engineering, information security, incident reporting and recovery, device protection, and internet safety. The course content is designed to empower the 杏吧原创 community by encouraging students, staff and faculty to be more cyber secure.

Instead of presenting information in long blocks of texts or videos, this course delivers its content through multiple kinds of engaging avenues. Below are some ways that make the Security Awareness course exciting, written by two co-op students currently working in Information Technology Services.

Hotspots

Hotspots allow you to be more directly involved with your own learning. These interactive buttons are added to slides, and reveal hidden information when clicked. The Security Awareness course uses hotspots throughout the various modules.

For instance, when discussing phishing emails, the course presents an example and uses it to dissect the common features of a phishing message. You can click on the hotspots scattered around the slide to learn more about these red flags.

A screen detailing features of a phishing message.

Audio

The Security Awareness course slides are accompanied by synced audio. This is particularly beneficial if you are an auditory learner rather than a visual learner. The voiceover has natural articulation and appropriate pacing to ensure that you can understand the information clearly.

If you find the voiceover distracting or if you just need a break, you can either mute or pause the audio in the upper right tab of the course slide.

A screen detailing the importance of strong passwords.

Animated Videos

Animated videos are featured throughout the Security Awareness course; they present a scenario related to the module topic and prompt you to consider the best course of action for the given situation.听Not only are these short videos fun to watch, they demonstrate key messages in a digestible way.

For example, in one of the animated videos, someone is using a public Wi-Fi connection to send an email containing confidential documents 鈥 this is dangerous because cybercriminals can capture information shared over an unsecured network.

A screen depicting a video on Traveling Securely.

Another screen depicting a video on Traveling Securely.

Knowledge Checks

There are short knowledge checks in each module of the Security Awareness course; these assess your understanding of the content that was covered. But don’t worry! There are no penalties for answering a question incorrectly and you can retake the knowledge check as many times as you want. In fact, there will be a pop-up text box that expands on why your answer was right or wrong.

Knowledge checks are a great way to keep track of your learning progress. If you’d like to improve your score on any given module, you can revisit it to review the content again.

A screen depicting a quiz on how to use Cloud services safely.

A screen depicting the results of a quiz and a grade of 60%.

Mini-Games

The Security Awareness course offers a variety of mini-games related to the various module topics. These games are an engaging alternative to long texts and videos 鈥 not only is learning about cybersecurity empowering, it is also fun!

For example, in the spear phishing module, there is a game that allows you to roleplay as a cybercriminal. You get to plan out a spear phishing attack and make decisions in order to execute it successfully. The game demonstrates the extent to which an actual cybercriminal will go through in order to harvest your personal data. By being more aware of the methodologies used in a spear phishing attack, you can prevent yourself from falling victim to it.

A screen depicting a minigame with a quiz.

A screen depicting information on how to stay safe from infected USB keys. A screen depicting a hacker.

Take Action

Hotspots, audio, animated videos, knowledge checks, and mini-games are just a few of the ways that make our Security Awareness course exciting. Since October is Cyber Security Awareness Month, there is no better time than now to .

If you complete at least one module of the Security Awareness course before October 29, 2022, you can be entered for a chance to win a pair of Airpods or Ravens merch. Click the button below for more details on the giveaway:

]]>
CSAM 2021: Learn to stay safe on social media /its/2021/csam-2021-learn-to-stay-safe-on-social-media/?utm_source=rss&utm_medium=rss&utm_campaign=csam-2021-learn-to-stay-safe-on-social-media Fri, 22 Oct 2021 16:32:12 +0000 /its/?p=28754 Enrol in our through Brightspace now to learn more about how to stay cyber secure!


It’s the final week of Cyber Security Awareness Month, and there’s no better time than now to review your personal cyber safety practices when it comes to social media. Here are some important things to think about before you share your next post.

Use complex passwords or a memorable passphrase

Sharing on social media is the name of the game! But if your password is something you鈥檝e shared on social media, like your hometown, best friend’s name or birthday, it will be easy for a cyber criminal to guess. And make sure to use a unique password or memorable passphrase for every account and platform you use.

Check your privacy settings

Social media platforms often change their privacy settings and features. Check these settings often to control who can see your content.

Turn multi-factor authentication on

Many social media platforms offer multi-factor authentication (MFA). Turning MFA on will help keep cyber criminals out of your account.

Keep private information private

Even if you鈥檙e careful, you can never know who鈥檚 on the other side of the screen. When you post on social media, avoid sharing:

  • Personal information like your phone number, email address, residence/home address, work details
  • Informative pictures: Check the background of pictures before you post for any revealing info like street signs or license plates.
  • Geotagged photos: Most smartphones and digital cameras automatically attach the exact location where a photo was taken. Many social media sites don鈥檛 capture this information when you post a photo. But when they do, turn off geotagging in your camera鈥檚 settings and remove geotags from older photos with photo editing software.
  • Exciting news: Vacation details, big purchases or events with your address can let criminals know there鈥檚 an opportunity to rob your home while you鈥檙e away.
  • Banking or financial information, including the name of your bank, credit or debit card numbers, and any other financial information.

Learn more about social media safety with our Security Awareness Course

Members of the 杏吧原创 Community are encouraged to enrol for our through Brightspace to learn more about how to stay cyber secure. After clicking the link above, you鈥檒l need to log in with your My杏吧原创One (MC1) password before enrolling.

The course is divided into a series of modules that are short, digestible and, most importantly, informative. Topics include:

  • Phishing
  • Ransomware
  • Wi-Fi Security
  • Social Engineering
  • Risky USB devices
  • And much more!

Cyber security doesn’t end after October, so watch the ITS web site and for information about new campaigns, tips and tricks as they become available.

If you have any questions, please contact ITS Security.

Thank you in advance for your participation!

A graphic with the words Cyber Security Awareness Month 2021, a mouse pointer arrow and a lock

]]>
CSAM 2021: Cyber security tips for students /its/2021/csam-2021-cyber-security-tips-for-students/?utm_source=rss&utm_medium=rss&utm_campaign=csam-2021-cyber-security-tips-for-students Fri, 15 Oct 2021 13:41:59 +0000 /its/?p=28749 Enrol in our through Brightspace now to learn more about how to stay cyber secure!


Cyber Security Awareness Month is a great opportunity for 杏吧原创 students to sharpen their cyber security skills.

Regardless of your level of technological expertise, following a few fundamental best practices will help you stay safe online. Doing so will safeguard your sensitive information from cyber criminals and ensure a secure, more enjoyable learning experience overall.

Create strong, unique passwords

Always secure each of your internet-enabled accounts or devices with a strong, unique password that is at least 12 characters long. Ensure your passwords contain a variety of uppercase and lowercase letters, numbers, and other symbols. To store and manage your passwords, avoid writing them on a piece of paper and, instead, use a password management program to centralize your data securely.

Enable multi-factor authentication

Adding an additional authentication layer to your online accounts or devices can significantly strengthen your data protection. Because it requires the user to enter an additional password or numeric code, it helps prove an individual鈥檚 identity on sign-in and makes it more difficult for cyber criminals to gain access to your information.

Inspect all incoming messages carefully

Whether it鈥檚 an email, SMS message, or an automated voicemail, stay vigilant and pay attention for any warning signs of a possible cyber attack. Beware of unsolicited or unexpected messages, even if they appear
to come from known contacts, don鈥檛 click on suspicious links, never download suspicious attachments, and never send any money.

Share personal data with extreme caution

Be wary of messages that ask you to divulge personal information, even if the tone is urgent and demands you take immediate action. Only share personal information online when you鈥檙e sure of the requestor鈥檚 identity and how they will use your data.

Keep your programs, operating system updated

Keep all software, from operating systems to applications you wish to use, updated at all times. These updates often come with critical security patches that help keep your data and personal data safe. If you鈥檙e downloading an app for the first time, ensure you鈥檙e obtaining the latest version. Installing and running older versions can leave you more vulnerable to a cyber threat.

Adjust your browser鈥檚 safety settings

Though most browsers have built-in filters to protect your data from an unsecured website, pop-ups, and other threats, it鈥檚 essential to adjust the necessary settings to enhance your level of security and privacy further. Also, clear your cookies, cache, and history after each internet session to ensure no data trail is left in the browser for long periods.

Report suspicious or malicious activity

If you encounter an unexpected message or cyber incident, like an unauthorized party joining a videoconference, report it immediately according to your institution鈥檚 existing policy. Be sure to flag suspicious messages as spam or phishing in your email client.

Stay cyber secure with our Security Awareness Course

Members of the 杏吧原创 Community are encouraged to enrol for our through Brightspace to learn more about how to stay cyber secure. After clicking the link above, you鈥檒l need to log in with your My杏吧原创One (MC1) password before enrolling.

The course is divided into a series of modules that are short, digestible and, most importantly, informative. Topics include:

  • Phishing
  • Ransomware
  • Wi-Fi Security
  • Social Engineering
  • Risky USB devices
  • And much more!

Cyber security doesn’t end after October, so watch the ITS web site and for information about new campaigns, tips and tricks as they become available.

If you have any questions, please contact ITS Security.

Thank you in advance for your participation!

A graphic with the words Cyber Security Awareness Month 2021, a mouse pointer arrow and a lock

]]>
CSAM 2021: Protect yourself from ransomware /its/2021/csam-2021-protect-yourself-from-ransomware/?utm_source=rss&utm_medium=rss&utm_campaign=csam-2021-protect-yourself-from-ransomware Tue, 12 Oct 2021 20:45:11 +0000 /its/?p=28726 Enrol in our through Brightspace now to learn more about how to stay cyber secure!


As Cyber Security Awareness Month continues, it’s a great opportunity to brush up on your understanding of how to stay safe from ransomware and other types of malware.

What is ransomware?

Ransomware is a type of malware and cybercrime that holds data for ransom. Access to data on computer networks, mobile devices, and servers is locked until the victim pays a ransom.

According to Sophos’ State of Ransomware in Education, 2020 was a tough year for education, with the sector experiencing the highest level of听ransomware attacks of all industries, only tied with retail. And according to the Marsh Canada Higher Ed Cyber Snapshot from May 2021, one听in every 3,000 emails passing through filters contains malware, with phishing being the top ransomware vector.

Common targets of ransomware include companies, individuals, organizations such as educational institutions like 杏吧原创, governments and hospitals. The two main types of ransomware are crypto ransomware and locker ransomware.

Ransomware can take on multiple forms. One of the most common methods of ransomware attack is with a phishing scam. A carefully worded email is sent urging the recipient to open an attachment or download a file. This action installs vector ransomware that takes over the computer and can infiltrate the entire computer network, locking everyone on the network out of their computers.

The goal of ransomware is to convince the victim to pay a ransom to unlock their data. Typically, the criminals behind ransomware demand the payment in Bitcoin 鈥 cryptocurrency that cannot be traced. Once the payment is secured, the victim receives an unlock code or decryption file that releases the data on the computer network, mobile device or servers.

Ransomware is a type of social engineering that criminals use to infect computers, infiltrate networks and steal data.

Learn to stay safe from ransomware!

Members of the 杏吧原创 Community are encouraged to enrol for our through Brightspace to learn more about how to stay cyber secure. After clicking the link above, you鈥檒l need to log in with your My杏吧原创One (MC1) password before enrolling.

The course is divided into a series of modules that are short, digestible and, most importantly, informative. Topics include:

  • Phishing
  • Ransomware
  • Wi-Fi Security
  • Social Engineering
  • Risky USB devices
  • And much more!

Cyber security doesn’t end after October, so watch the ITS web site and for information about new campaigns, tips and tricks as they become available.

If you have any questions, please contact ITS Security.

Thank you in advance for your participation!

A graphic with the words Cyber Security Awareness Month 2021, a mouse pointer arrow and a lock

]]>
CSAM 2021: Stay safe online by watching for our simulated phishing emails /its/2021/csam-2021-combat-phishing/?utm_source=rss&utm_medium=rss&utm_campaign=csam-2021-combat-phishing Fri, 08 Oct 2021 18:24:12 +0000 /its/?p=28699 Enrol in our through Brightspace now to learn more about how to stay cyber secure!


Phishing is a cyber crime that uses tactics like deceptive emails, websites, and text messages to steal confidential information from individuals or organizations. Cyber criminals use stolen information like addresses, names, and social insurance numbers to apply for credit cards or loans, open bank accounts, and commit other fraudulent activity.

During Cyber Security Awareness Month, the 杏吧原创 community will begin receiving safe and simulated phishing emails, automatically generated by our systems, to help faculty, staff and students better recognize what a phishing email might look like. These emails will be modelled after real-life emails that have arrived in 杏吧原创 email inboxes in the past. If a user clicks on a link in the email, they will be taken to an informational page outlining ways to stay safe online. This page will be hosted on a 杏吧原创 site and will encourage viewers to sign up for the security awareness courses mentioned above.

Importantly, participants, including those who click on links in the simulated phishing emails, are not being evaluated. This initiative is for informational and education purposes only, and those who click on simulated phishing links will only be encouraged to learn more about how to stay safe online.

A graphic with the words Cyber Security Awareness Month 2021, a mouse pointer arrow and a lock. Phishing campaign poster.

Learn more about phishing

Interested in learning more? Read our informational page and learn how to use our Report Phishing button.

Cyber security doesn’t end after October, so watch the ITS web site and for information about new campaigns, tips and tricks as they become available.

If you have any questions, please contact ITS Security.

Thank you in advance for your participation!

]]>
CSAM 2021 is here! Enrol for our new Security Awareness Course now /its/2021/csam-2021-security-awareness/?utm_source=rss&utm_medium=rss&utm_campaign=csam-2021-security-awareness Fri, 01 Oct 2021 18:05:00 +0000 /its/?p=28687 Did you know that Cyber Security Awareness Month (CSAM) takes place each听October? It’s a chance to educate citizens about how to stay safe and cyber aware while they work and live online. This year, 杏吧原创 is marking the occasion by launching its new听, which is open to members of 杏吧原创 community now!

The course is divided into a series of modules that are short, digestible and, most importantly, informative. Topics include:

  • Phishing
  • Ransomware
  • Wi-Fi Security
  • Social Engineering
  • Risky USB devices
  • And much more!

As part of the campaign, all staff, faculty, and students are encouraged to for the course. Keep in mind that, after clicking the link above, you’ll need to log in with your My杏吧原创One (MC1) password before enrolling.

A graphic with the words Cyber Security Awareness Month 2021, a mouse pointer arrow and a lock

Simulated Phishing Email Campaign

During the month, the 杏吧原创 community will also begin receiving safe and simulated phishing emails, automatically generated by our systems, to help faculty, staff and students better recognize what a phishing email might look like. These emails will be modelled after real-life emails that have arrived in 杏吧原创 email inboxes in the past. If a user clicks on a link in the email, they will be taken to an informational page outlining ways to stay safe from phishing attempts. This page will be hosted on a 杏吧原创 site and will encourage viewers to sign up for the security awareness courses mentioned above.

Importantly, participants, including those who click on links in the simulated phishing emails, are not being evaluated. This initiative is for informational and education purposes only, and those who click on simulated phishing links will only be encouraged to learn more about phishing.

Cyber security doesn’t end after October, so watch the ITS web site and for information about new campaigns, tips and tricks as they become available.

If you have any questions, please contact ITS Security.

Thank you in advance for your participation!

]]>
5 Tips to Keep your Passwords Safe and Secure /its/2019/5-tips-to-keep-your-passwords-safe-and-secure/?utm_source=rss&utm_medium=rss&utm_campaign=5-tips-to-keep-your-passwords-safe-and-secure Tue, 22 Oct 2019 14:51:40 +0000 /its/?p=26254 It鈥檚 Cyber Security Awareness Month and this week we鈥檙e talking about passwords.

We are all responsible for the safety of our own accounts, whether they be our banking credentials, email credentials, or My杏吧原创One credentials. Here are some tips to help you keep your accounts safe and secure:

  1. Enable two-factor authentication. This is the single most effective way to keep your accounts secure.
  2. Never respond to email requests for your password, even if the email appears to come from 杏吧原创. These are phishing attempts in order to steal your information.
  3. Never share your password with others.
  4. When creating your password, use a minimum eight characters in length and include upper case, lower case, numbers and special characters.
  5. Use different passwords for your accounts. For example, do not use your Facebook password for your My杏吧原创One account. 鈥 Help keep these passwords straight by using a .

]]>
Cyber Security Awareness Month – How to Spot a Phishing Attempt /its/2019/cyber-security-awareness-month-how-to-spot-a-phishing-attempt/?utm_source=rss&utm_medium=rss&utm_campaign=cyber-security-awareness-month-how-to-spot-a-phishing-attempt Tue, 08 Oct 2019 15:44:03 +0000 /its/?p=26227 It鈥檚 Cyber Security Awareness Month and this week we鈥檙e talking about email.

Email is one of the easiest ways for cyber criminals to target ordinary citizens.听 Here are a few risks to be aware of when it comes to your email:

  • A weak email account password could leave your personal information vulnerable – and use two-factor authentication when possible
  • 听may be sent as an attachment in an email and allow criminals access to your information.
  • 听can spread through email to your entire contact list without you knowing it.
  • 听can trick you into opening attachments or giving up personal information. They appear to be emails from organizations or companies you trust, but they’re often the gateway to identity theft.
  • 听can get through your filter and inundate you with unsolicited email.

If you receive an听email from an address you don鈥檛 recognize, your first thought should be: is this email legitimate? 听But know that malicious emails can also come from an address that you do recognize 鈥 perhaps their account got hacked and is now being used to spam people.

There鈥檚 a good chance an email is a phishing attempt if:

  • It asks you for your password or directs you to a web form asking for your password
  • If the link within the body of the message points to a non-杏吧原创 email address
  • The subject line is in all caps
  • There is a call for immediate action 鈥 鈥渄ownload this now鈥 or 鈥渃onfirm you email identity now鈥 or 鈥渃lick on the link below鈥
  • There are spelling or grammatical errors in the email

It鈥檚 important to be able to recognize a phishing attempt and, most importantly, not be baited.

What do you do if you receive a phishing email? A good rule of thumb is to automatically delete anything that looks out of the ordinary or if you’re not quite sure, you can forward it along to the ITS Service Desk.听听

]]>