Re: Awareness Training

["Madl, Michael" <michael.madl () INDWES EDU>]

+1 on Proofpoint [formerly Wombat]

Have not had the time or approval yet [ 😉 ] for phishing tests but education platform is great.  Very flexible and also 
use it for employee on boarding.


MICHAEL MADL
CEH, CCIE #10062, ITIL v3, VCP6-DVC
INFORMATION SECURITY OFFICER
UNIVERSITY INFORMATION TECHNOLOGY

INDIANA WESLEYAN UNIVERSITY
4201 SOUTH WASHINGTON STREET
MARION, IN 46953

  [signature_508165126] <https://twitter.com/InfosecurityIwu>  [signature_1630273918] 
<https://www.linkedin.com/in/michaelmadl/>  [signature_826658807] <mailto:michael.madl () indwes edu>
     765.677.2688

[cidimage004.jpg@01D51231.B0363E20]

DO NOT provide your username, password, or any personal information requested by any email.
IWU WILL NEVER ask you for your username or password via email.
DO NOT CLICK links or attachments unless you are positive the content is safe.

CONFIDENTIALITY NOTICE: This email, including applicable attachments, may include legally protected information.  If 
you are not the intended recipient of this message, you may not disclose, print, copy, save, or disseminate this 
information. If you have received this email in error, please notify the sender by replying to this message and 
immediately delete this message.



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of "Dickey, A. 
(Antoinette)" <Antoinette.Dickey () VOYA COM>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Tuesday, January 28, 2020 at 5:09 PM
To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Awareness Training

** This message originated from outside the Indiana Wesleyan University email system **
________________________________
Proofpoint<https://www.proofpoint.com/us> is the application we purchased last year.  I am having a lot of fun with it. 
 We use it for a number of things.

Phishing Tests

  *   We load the email addresses into Proofpoint and send out the phishing tests.
  *   We can auto enroll users that failed phishing tests into a specific Proofpoint module. Or we can manually add 
them to our internal training app.
  *   Proofpoint has approvals from companies to use their logos in phishing tests. Examples are FedEx, Starbucks, etc. 
These are more realistic.  The FedEx test almost got me last week.  I had not ordered anything. I might have clicked if 
it was December. I sent Christmas presents to all the grandkids.

Security Education Platform

  *   Assessments

     *   You can assign users to an assessment to determine your baseline.
     *   Assessments range from Security Essentials to specific ones on passwords, phishing, security on the go, etc.

  *   Training Modules:

     *   You can send the link to Proofpoint’s training module to users. Users will take the training in Proofpoint.
     *    You can customize the training. Add your logo or change the wording.
     *   You can export Proofpoint’s module to your internal training app.  We are exporting into SCORM format and 
loading it into Cornerstone app.

  *   Security Awareness Materials

     *   Posters
     *   Short videos (2-3 mins)


Toni Dickey, CISA, CRISC
IT Security Awareness & Training Lead
Office of the CISO
Technology Risk & Security Management
Voya Financial™
One Orange Way A2S, Windsor, CT 06095
Office: (860) 580-1997
Email: Antoinette.Dickey () voya com<mailto:Antoinette.Dickey () voya com>

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Jeffrey Miller
Sent: Tuesday, January 28, 2020 04:32 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Awareness Training

You might look into Infosec Institute.


Jeff Miller
Office of Information Technology
Director, Information Security
University of Central Oklahoma
(405) 974-2697
jmiller25 () uco edu<mailto:jmiller25 () uco edu>
https://technology.uco.edu
________________________________
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of Pete, Andrew <000000d06e28c017-dmarc-request () LISTSERV EDUCAUSE 
EDU<mailto:000000d06e28c017-dmarc-request () LISTSERV EDUCAUSE EDU>>
Sent: Tuesday, January 28, 2020 3:20:56 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> <SECURITY () LISTSERV EDUCAUSE 
EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: Re: [SECURITY] Awareness Training


I’m specifically looking for a training platform like KnowBe4 that we can use to assign and track training modules to 
employees.  I’m still trying to decide what I want out of the platform which is why I asked a more broad question.  I 
would like something that covers basic information security topics including social engineering.  Ideally I’d like 
something that also has training on topics related to specific compliance such as PCI, GDPR, etc.



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Younes, Wiam H
Sent: Tuesday, January 28, 2020 3:05 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Awareness Training



This message originated outside of New England Institute of Technology. Use caution when opening attachments, clicking 
links or responding to requests for information.

Hi Pete,



When mentioning an awareness system, are looking to raise awareness in a specific area, e.g., Phishing?



An Information Security Awareness program encompasses an array of educational and communication methods to raise your 
constituents' knowledge level on key security issues for the protection of their personal and the institution’s 
information assets. EDUCAUSE offers online material on establishing an Information Security Awareness Program at 
https://www.educause.edu/focus-areas-and-initiatives/policy-and-security/cybersecurity-program/resources/information-security-guide/toolkits/security-awareness-quick-start-guide<https://urldefense.com/v3/__https:/www.educause.edu/focus-areas-and-initiatives/policy-and-security/cybersecurity-program/resources/information-security-guide/toolkits/security-awareness-quick-start-guide__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqRR9f5Zl$>



You may also consider joining the monthly EDUCAUSE Awareness and Training group, where Information Security Awareness 
professionals working in Higher ED meet to discuss best practices, processes, requirements and innovative Awareness & 
Training methods. Valerie Vogel at vvogel () educause edu<mailto:vvogel () educause edu> can send you a meeting invite 
if interested.



Please don’t’ hesitate to reach out if I can be of any assistance.



Thank you,

Wiam

--------------------------------------------------------------------------------------
Wiam Younes, Ph.D.
Information Security Training Officer
Information Systems and Computing|Office of Information Security
3401 Walnut Street|Suite 232A| Philadelphia|PA. 19104
W.215.898.0040| F.215.573.2037|Email: younes () upenn edu<mailto:younes () upenn edu>

[cid:image005.jpg@01D5D772.A2A825F0]



From: Pete, Andrew<mailto:000000d06e28c017-dmarc-request () LISTSERV EDUCAUSE EDU>
Sent: Tuesday, January 28, 2020 12:08 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Awareness Training



Hello Everyone,



We are looking to implement an awareness training system.  I’m curious what other institutions are using and any 
recommendations on features/capabilities.  Thanks in advance.



Andrew Pete

Information Security Architect



New England Institute of Technology

One New England Tech Boulevard

East Greenwich, RI 02818-1205

401-780-4460 (Direct)

apete () neit edu<mailto:apete () neit edu>



[NEIT_Full_Stack_H_White_BG_PNG1]





**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqXbwygiG$>



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqXbwygiG$>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqXbwygiG$>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqXbwygiG$>
--------------------------------------------------------- NOTICE: The information contained in this electronic mail 
message is confidential and intended only for certain recipients. If you are not an intended recipient, you are hereby 
notified that any disclosure, reproduction, distribution or other use of this communication and any attachments is 
strictly prohibited. If you have received this communication in error, please notify the sender by reply transmission 
and delete the message without copying or disclosing it. 
============================================================================================

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community