<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-style-priority:99;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">This weekend I will be pulling some things together with what I currently use and then start looking for ideas. I am not sure what visions or other avenues other
might be thinking about for training. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Here are some quick things I have thought about that we can discuss as starting points which may lead trigger other thoughts. I think this might be a good starting
block to generate conversation.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Email/Phishing security (this is mainly what I do)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Account/Password security - best practice for users (do’s and don’ts); This may trigger what IT should consider for single sign-on pros & con<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Web surfing security<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Importance of guarding PII<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Is training for student vs. faculty/staff handled differently<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">What methods of training/awareness initiatives (online, in person, posters, student activities etc.)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Let me know if there are any other ideas and how we want to move forward from here.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Rene’<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Biggers, Anna L. [mailto:abiggers@ou.edu]
<br>
<b>Sent:</b> Friday, September 09, 2016 9:06 AM<br>
<b>To:</b> Mason, Rene <rene.mason@swosu.edu>; CoIT-Security@lists.onenet.net<br>
<b>Subject:</b> RE: Security training @ SWOSU<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">This is great! Sounds like you are further along than some of us. Once I get the repository set up, I hope you will post some of your content there. I would also ask you
to consider facilitating a conversation – perhaps where you share some of your content and what you are doing, and then generate a conversation or Q&A from the group. Let me know if you are up for it!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Thanks again – glad to have you as part of the group!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Anna<o:p></o:p></span></p>
<p class="MsoNormal"><a name="_MailEndCompose"></a><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">
<a href="mailto:coit-security-bounces@lists.onenet.net">coit-security-bounces@lists.onenet.net</a> [<a href="mailto:coit-security-bounces@lists.onenet.net">mailto:coit-security-bounces@lists.onenet.net</a>]
<b>On Behalf Of </b>Mason, Rene<br>
<b>Sent:</b> Wednesday, September 7, 2016 8:32 PM<br>
<b>To:</b> <a href="mailto:CoIT-Security@lists.onenet.net">CoIT-Security@lists.onenet.net</a><br>
<b>Subject:</b> [CoIT-Security] Security training @ SWOSU<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:black">Hello,<br>
<br>
I am the network administrator for Southwestern Oklahoma State University. Per the meeting we had yesterday, we do "some security training" for all of our staff. All new employees go through a orientation session. I have a segment in this training. I go
over account information and then I transition to a section on security. My main emphasis is on phishing emails by going over emails and point out various red flags to look for in emails. Then I end with a few tips on things to keep their SWOSU and personal
accounts more secure and tips of how to keep some of their personal data safe; hoping that making it personal for them.<br>
<br>
I have been planning on making security training to be a required online testing to be done 2-4 time a year with different parts of security in each section (15 minutes of time). All SWOSU employees have mandated online training require. The trainings varies
with yearly, twice a year and 4 times a year. This will fit in with those. I just visited with our HR department today and they are in agreement with this.<br>
<br>
We are also looking at incorporating something like this for students as well. Student receive a quarterly email from us warning about phishing emails. Since we have quite a bit more trouble students, we are toying with the idea of making them take test or
possible view a video before we reactive their accounts if they are shutdown do to becoming compromised.<br>
<br>
We have already been planning for October cybersecurity month. We have posters made up and have been handing out information. We just had an organizational fair in order to get students to our booth we had a drawing for some prizes.<br>
<br>
I know we are not doing much at this time but would like to do more as we move forward. I look forward to getting more ideas.<br>
<br>
Rene' Mason<br>
Southwestern Oklahoma State University<br>
Network Administrator<o:p></o:p></span></p>
</div>
</div>
</body>
</html>