Re: New Employee Security Training

["Ullman, Catherine" <cende () BUFFALO EDU>]

Hi Tom,

 

At the moment, we are a part of HR's onboarding process.  I'm only given
approximately 10 minutes to speak.  I cover the basics:

 

1.      Where to find IT information (such as free software, password
changing, etc.) and how to get support

2.      The idea that want them to be partners in IT safety with us by
choosing a secure passphrase as well as being diligent, skeptical and
suspicious of email they receive 

3.      How to report suspicious (i.e. phishing) messages and examples of
the alerts we create for certain types of messages

4.      Security recommendations for mobile devices (we give them a link and
let them know the info is out there)

5.      Appropriate uses of IT resources and other policy information 

 

The training is given once a month at the HR orientation sessions, which I
think are unfortunately optional.  The audience, though, does seem to have a
positive response to the information I provide.  I honestly don't know how
well it works in terms of real statistics, but I've certainly had several
people come up to me later and say "I remember you from orientation."  So,
at a minimum, it puts a face to our office, which would otherwise be sort of
a mythical creature in a very large institution.

 

Please let me know if you have any questions.

 

Best,

Cathy

 

 

Dr. Catherine J Ullman

Senior Information Security Analyst

Information Security Office

University at Buffalo

 <mailto:cende () buffalo edu> cende () buffalo edu

 

 

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas Carter
Sent: Friday, June 16, 2017 3:33 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] New Employee Security Training

 

Does anyone do IT security training as part of on-boarding new employees? If
so, what do you cover? Who does the training (IT, HR, or?)? When is the
training done? How well does it seem to work for you? What would you do
differently?

 

We would like to implement something like this, but are afraid of
overwhelming a new employee during their HR orientation. Something done a
week or two later may have a better chance of sticking with the end user,
but requires much more time and organization on our part.

 

Thomas Carter
Network & Operations Manager / IT

Austin College
900 North Grand Avenue 
Sherman, TX 75090

Phone: 903-813-2564
 <http://www.austincollege.edu/> www.austincollege.edu

Attachment: smime.p7s
Description: