Tag Archives: Cybersecurity

Who Can I Contact?

To report a Cybersecurity Incident, please contact:

Simmons Technology ServiceDesk
[email protected]

For more information about Information Security at Simmons including consultation on alignment of business processes with our Information Security policies please contact:

Richard Phung
Information Security Analyst
[email protected]

References
https://www.cisa.gov/national-cyber-security-awareness-month
https://enterprise.verizon.com/resources/reports/dbir/
https://www.ibm.com/security/data-breach
https://www.varonis.com/2019-data-risk-report/

Online Information Security Training Now Available

securing-the-human-newsInformation security is a complex and constantly evolving topic. Threats to the security of the Simmons network and our data, as well as your personal data, change every day. Fortunately, there are steps you can take to stay secure and to prevent most common causes of unauthorized access to your information.

To help you better understand current threats to information security and the resources available to you, Simmons Technology is providing access to a short, video-based security awareness course called Securing the Human. Topics covered include: an overview of how criminals gain unauthorized access to data, staying safe when browsing and using email, securing your mobile device, tips for using social media safely, and keeping personal information secure on our network and in the cloud.

The course consists of 2-5 minute video sessions and takes about an hour to complete. It is available online at any time to faculty and staff.Completion of the training is necessary for compliance with Massachusetts Standards for the Protection of Personal Information, and we encourage you to do so at your earliest convenience.

You should have received an email recently notifying you that your account has been created and containing a link to the training. If you do not have this email, you can also access the training directly by visitingsso.securingthehuman.org/simmons and signing in with your Simmons username and password. If you have any problems accessing or completing the training, please contact the Service Desk at 617-521-2222.

Enhancing Data Security and Protecting Sensitive Information

laptop_newsletterRecently, there have been several high-profile cases in which colleges’ sensitive information has been made publicly available via cyber attacks, phishing scams, or internal error. These data breaches have taken a reputational and financial toll on Boston University, the University of Maryland, and Indiana University, and exposed the data of more than 450,000 students and employees.

We’d like to take this opportunity to remind you to be aware of unlawful attempts to access your data, and to communicate a change we’ve instituted to make some Simmons websites more readily identifiable.

Phishing scams are attempts to obtain confidential information using emails, websites, and even phone calls that appear to be from a trusted source. Often, phishing emails mask the “from” address to create the appearance that they’ve been sent by a colleague or friend, or as an alert from your bank. Links included in these emails will direct you to websites that look very much like the sites for services you use and will ask you to enter your username and password or other personal information.

Recent widespread examples of phishing scams have affected Gmail and Bank of America. While some scams are very sophisticated, there are a few things you can do to stay safe.

First, do not click links in emails that appear to be suspicious and never respond to an email requesting sensitive information. If an email contains suspicious links or requests for information from a trusted source, navigate to their website manually (instead of clicking a link) or call them to verify the request.

When visiting secure websites, check the address bar in your web browser to make sure it matches what you’re seeing on-screen. For example, all secure website addresses at Simmons begin with https:// and end with the .simmons.edu domain.

To help make our secure websites more easily identifiable, we’ve introduced visual identifiers for login.simmons.edu and connection.simmons.edu. If you see green on the left side of the address bar along with the text “Simmons College (US),” you’re in the right place.

ev_cert_examples

Finally, remember that a trusted source, such as Simmons College, will never ask for your password or other personal information via email or phone. If you’re unsure about the validity of an email or website, you can always contact the Service Desk at 617-521-2222 for help.