Re: How to reach college students about security?

[Brad Judy <brad.judy () CU EDU>]

I’m personally not a fan of using student orientation for awareness work.  Students are being overloaded with 
information from many sources and they only really care about the basics of their schedule, figuring out where 
everything is located, food, lodging, new roommates, transportation, etc.  Years ago I did some of that, but I think 
the information retention rate for IT or security items during orientation is extremely low.

Brad Judy

Information Security Officer
Office of Information Security
University of Colorado
1800 Grant Street, Suite 300
Denver, CO  80203
Office: (303) 860-4293
Fax: (303) 860-4302
www.cu.edu<http://www.cu.edu/>

[u-logo_fl]



From: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Paul Kennedy <paul.kennedy () UCD IE>
Organization: University College Dublin
Reply-To: "Paul.Kennedy () ucd ie" <paul.kennedy () UCD IE>
Date: Wednesday, May 31, 2017 at 6:36 AM
To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] How to reach college students about security?

Hi Eric,

The idea’s to promote awareness are really useful, particularly the web cam ideas, but they are quite expensive in 
Europe. We really push infosec awareness during student orientation week and we have mandatory IT Orientation workshops 
for all incoming students. We also have giveaways for students including an security awareness bookmark, customised 
mobile phone wallets, that stick to the back mobile phones and can also hold a student card, which are very popular.

For high profile cyber days, such as Safer internet day, we put up stands in  prominent locations on campus with more 
giveaways. We just purchased customised IT Security bicycle seat rain covers (attached), which are good for the Irish 
weather!  Finally we try our best to follow the great Educause Awareness campaigns and promote security awareness in 
the Student and Staff e-zines.

Our most successful campaign to date was a Phishing Awareness Campaign using an interactive Phishing Challenge 
developed by our own Media office. An outside IT Security company sponsored a mobile tablet as a prize, so there was 
huge take-up.  I guess the chance to win something always generates interest, so if you can get sponsored prizes, it 
always helps.  We are trying to get more sponsored prized for a password protection campaign.  The phishing challenge 
is available publically by searching for “ucd phishing challenge”, it was developed using storyline and I am happy to 
share the code with you.

Hope this helps,
Paul


__________________________
Paul Kennedy
I.T Security Officer
Tel: +353 1 7162015
Web: www.ucd.ie/itsecurity
[cdpassword - Email Signature]


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Smith, 
Eric
Sent: Friday 26 May 2017 20:28
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] How to reach college students about security?

All,

We are planning an IT hosted event for opening week of classes. Most of it is entertainment-based (flying drones, face 
painting, jugglers, zoo animals!) but there’s some carrot n stick elements.... eg,  giving them a food reward for 
downloading our college mobile app.

I’ve been tasked with promoting IT security for this event. Sure, I can rattle off scary stats or news items, give 
practical advice which will be promptly forgotten, hand out various fliers that’ll get pitched… the same struggles 
everyone else probably has when dealing with employees in this realm. I’m having more difficulty than I expected in 
developing something that will especially grab a millennial audience.

Something that is:


-          Engaging/enticing. At their age, everyone’s living forever and bad things always happen to someone else. 
It’s a challenge to break through that.

-          Brief and somewhat unstructured. The event will be a string of booths where people pass by. Things might 
move relatively fast, so this may boil down to a few sentences and pushing something relevant (hopefully not a slip of 
paper commandments) into their hands.

Has anyone else tackled a quick, informative sell to students, preferably with some useful trinkets or materials? If 
so, what worked for you?


Eric Smith
Assistant Director, Technical Support
Xavier University
t: 513-745-3953
[id:image002.gif@01D1269B.DA29BD90]<http://twitter.com/XUTechHelp>