Re: New Employee Security Training

["Hart, Michael" <mhart20 () MSUDENVER EDU>]

We present a 10 minute video as part of new employee orientation, and also in new student orientation.  It's in need of 
an update, but you can see it here:  http://msudenver.edu/technology/security/

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Ullman, 
Catherine
Sent: Friday, June 16, 2017 1:43 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] New Employee Security Training

Hi Tom,

At the moment, we are a part of HR's onboarding process.  I'm only given approximately 10 minutes to speak.  I cover 
the basics:


1.       Where to find IT information (such as free software, password changing, etc.) and how to get support

2.       The idea that want them to be partners in IT safety with us by choosing a secure passphrase as well as being 
diligent, skeptical and suspicious of email they receive

3.       How to report suspicious (i.e. phishing) messages and examples of the alerts we create for certain types of 
messages

4.       Security recommendations for mobile devices (we give them a link and let them know the info is out there)

5.       Appropriate uses of IT resources and other policy information

The training is given once a month at the HR orientation sessions, which I think are unfortunately optional.  The 
audience, though, does seem to have a positive response to the information I provide.  I honestly don't know how well 
it works in terms of real statistics, but I've certainly had several people come up to me later and say "I remember you 
from orientation."  So, at a minimum, it puts a face to our office, which would otherwise be sort of a mythical 
creature in a very large institution.

Please let me know if you have any questions.

Best,
Cathy


Dr. Catherine J Ullman
Senior Information Security Analyst
Information Security Office
University at Buffalo
cende () buffalo edu<mailto:cende () buffalo edu>



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas 
Carter
Sent: Friday, June 16, 2017 3:33 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] New Employee Security Training

Does anyone do IT security training as part of on-boarding new employees? If so, what do you cover? Who does the 
training (IT, HR, or?)? When is the training done? How well does it seem to work for you? What would you do differently?

We would like to implement something like this, but are afraid of overwhelming a new employee during their HR 
orientation. Something done a week or two later may have a better chance of sticking with the end user, but requires 
much more time and organization on our part.

Thomas Carter
Network & Operations Manager / IT
Austin College
900 North Grand Avenue
Sherman, TX 75090
Phone: 903-813-2564
www.austincollege.edu<http://www.austincollege.edu/>