CIT Accomplishments and Plans - Computing at Cornell - Cornell ...

16
Safeguarding Cornell’s
Computers, Networks, and Data
The IT Security Office is charged with ensuring the security and
integrity of the university’s computer systems, networks and data,
while maintaining an IT environment that is supportive of Cornell’s
academic mission and culture. The office takes a lead role in
developing campus security architecture, policies, standards and
practices. Focus this year has primarily been on increasing awareness
and application of computer security policy and practices by the
campus community, providing an Active Directory service for
new Exchange email and departmental use, and confidential data
identification and management practices.
Raising Computer Security
Awareness
This year we launched a campaign
to increase awareness around security
concerns and foster a culture of
personal responsibility . As part of this
effort, a new PDF e-book, Computer
Security at Cornell: Secure Your Computer
On and Off Campus, was developed and
made available to faculty and staff . The
material in the handbook also formed
the basis of a revised security web site
on Computing at Cornell .
The e-book, which has been
downloaded more than 1,900 times
since February 2009, is full of quotes,
links to trusted sites, analogies, and
news articles to help teach faculty
and staff:
▪ Why secure computing is your
responsibility
▪ How to recognize and respond to
possible security problems
▪ How to protect your identity
▪ How to protect university data
▪ How to secure the computer you
use at Cornell
▪ Internet safety
▪ Secure computing practices when
working off campus
Both the handbook and the
web site include everything most
people need to know about the new
security requirements that are being
introduced in Policy 5 .10, Information
Security .
Other educational and awareness
materials, such as a public lab
computer desktop image alerting
students to the risk of falling for
phishes, and a postcard reminding
faculty and staff to set their NetID
security questions are part of the
cit.cornell.edu/security/index.cfm
greater campaign to continue to keep
messages about computer security on
people’s minds .
As part of National Cyber Security
Awareness Month, Cornell also
welcomed other universities to use the
computer security e-book as a resource
for the development of additional
campus awareness and educational
materials .
Don’t Click That
The IT Security Office has developed a
one-hour presentation entitled “Don’t Click
That .” Aimed at non-technical audiences,
this interactive session discusses various
risks to university data, the current state of
Internet crime, and how to avoid attempts
to defraud over the Web or electronic
mail . The seminar is available to interested
departments . Email security-services@cornell.edu
for information .