Re: How to reach college students about security?

["Viegas, George" <viegas () CHAPMAN EDU>]

We did an InfoSec tent in the main plaza and raffled off a monitor and Starbucks gift cards. Also handed out free 
frisbees,  flyers with phishing awareness info and RFID wallets and pens with our InfoSec contact info. The branded 
RFID wallets in particular were a big hit.

In the tent we had a few tables with a  tabletop phishing game that gave additional raffle entries. We also had a few 
blowup colorful Nemo like fishes , a laptop with a continuous presentation and usb lights on the table.

I also suggest not having too many people sitting behind the tables which can be intimidating. Instead have staff in 
front of the tables, for more direct engagement w passing students.

In return we had the students sign up with their email for interest in learning more about cybersecurity (part of the 
raffle signup) and we also had many good discussions with the students that stopped by.

We also periodically put in cybersecurity messaging in the weekly student newsletter from the Dean of students office.

-George

George Viegas CISSP, CISA
Informaton Security, IS&T,Chapman University
714-744-7979/viegas () chapman edu
Check out ‘chapman.edu/security’ for the latest Chapman security updates



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Brian 
Meyer
Sent: Tuesday, May 30, 2017 12:07 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] How to reach college students about security?

Eric,

Some ideas that pop in my head for that age demographic are 2FA on social media (Instagram, Twitter, Facebook, Snapchat)

Mobile app permissions. Ever wonder why certain apps are so good at targeting ads at you?

On Android go to Settings > Privacy and safety > App permissions. On iOS go to Settings > Privacy.


Lastly, I'd try to educate on password managers. Lastpass, 1password, Dashlane. All have mobile clients and are pretty 
easy to setup for the average end-user.


Thank You

Brian Meyer

Security Administrator

Information Security & Identity Management

Montclair State University

PGP: 0x801A8A89
On 5/30/2017 2:53 PM, Smith, Eric wrote:
Walter,

That’s a simple, great idea! There are a surprising amount of businesses catering to that market; which one did you end 
up buying from?


Eric Smith
Assistant Director, Technical Support
Xavier University
t: 513-745-3953


[cid:image002.gif@01D1269B.DA29BD90]<http://twitter.com/XUTechHelp>


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of WALTER 
KERNER
Sent: Friday, May 26, 2017 3:44 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] How to reach college students about security?

Hi Eric. Unfortunately the timing is just a bit off. In the Fall semester we will be engaging students in our 
advertising and marketing department to develop a student-relevant Infosec awareness campaign, but I won't have 
anything to share until mid-semester.

We did find little slide-covers for laptop cameras which can be school branded for under a dollar each. They seem like 
a good giveaway for students, especially if you plan to discuss cyber bullying. Let me know if you want to chat further

Walter Kerner
Acting CISO
Fashion Institute of Technology.



On Fri, May 26, 2017 at 3:38 PM Smith, Eric <smithe28 () xavier edu<mailto:smithe28 () xavier edu>> wrote:
All,

We are planning an IT hosted event for opening week of classes. Most of it is entertainment-based (flying drones, face 
painting, jugglers, zoo animals!) but there’s some carrot n stick elements.... eg,  giving them a food reward for 
downloading our college mobile app.

I’ve been tasked with promoting IT security for this event. Sure, I can rattle off scary stats or news items, give 
practical advice which will be promptly forgotten, hand out various fliers that’ll get pitched… the same struggles 
everyone else probably has when dealing with employees in this realm. I’m having more difficulty than I expected in 
developing something that will especially grab a millennial audience.

Something that is:


-          Engaging/enticing. At their age, everyone’s living forever and bad things always happen to someone else. 
It’s a challenge to break through that.

-          Brief and somewhat unstructured. The event will be a string of booths where people pass by. Things might 
move relatively fast, so this may boil down to a few sentences and pushing something relevant (hopefully not a slip of 
paper commandments) into their hands.

Has anyone else tackled a quick, informative sell to students, preferably with some useful trinkets or materials? If 
so, what worked for you?


Eric Smith
Assistant Director, Technical Support
Xavier University
t: 513-745-3953
[cid:image002.gif@01D1269B.DA29BD90]<http://twitter.com/XUTechHelp>




--
Walter Kerner
Acting AVP and CISO
Fashion Institute of Technology