[CoIT-Security] Security training @ SWOSU

[Biggers, Anna L.]

This is great!  Sounds like you are further along than some of us.  Once I get the repository set up, I hope you will post some of your content there.  I would also ask you to consider facilitating a conversation - perhaps where you share some of your content and what you are doing, and then generate a conversation or Q&A from the group.  Let me know if you are up for it!

Thanks again - glad to have you as part of the group!
Anna

From: coit-security-bounces at lists.onenet.net [mailto:coit-security-bounces at lists.onenet.net] On Behalf Of Mason, Rene
Sent: Wednesday, September 7, 2016 8:32 PM
To: CoIT-Security at lists.onenet.net
Subject: [CoIT-Security] Security training @ SWOSU

Hello,

I am the network administrator for Southwestern Oklahoma State University.  Per the meeting we had yesterday,  we do "some security training" for all of our staff.  All new employees go through a orientation session.  I have a segment in this training.  I go over account information and then I transition to a section on security.  My main emphasis is on phishing emails by going over emails and point out various red flags to look for in emails.  Then I end with a few tips on things to keep their SWOSU and personal accounts more secure and tips of how to keep some of their personal data safe; hoping that making it personal for them.

I have been planning on making security training to be a required online testing to be done 2-4 time a year with different parts of security in each section (15 minutes of time).  All SWOSU employees have mandated online training require.  The trainings varies with yearly, twice a year and 4 times a year.  This will fit in with those.  I just visited with our HR department today and they are in agreement with this.

We are also looking at incorporating something like this for students as well.  Student receive a quarterly email from us warning about phishing emails.  Since we have quite a bit more trouble students, we are toying with the idea of making them take test or possible view a video before we reactive their accounts if they are shutdown do to becoming compromised.

We have already been planning for October cybersecurity month.  We have posters made up and have been handing out information.  We just had an organizational fair in order to get students to our booth we had a drawing for some prizes.

I know we are not doing much at this time but would like to do more as we move forward.  I look forward to getting more ideas.

Rene' Mason
Southwestern Oklahoma State University
Network Administrator

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.onenet.net/pipermail/coit-security/attachments/20160909/01c5a397/attachment.html>