Re: New Employee Security Training

["Telfer, Will" <Will_Telfer () BAYLOR EDU>]

We get about 15 minutes during new employee orientation to talk about passwords, information handling, web content & 
malware filtering, social engineering, phishing, & out cybersecurity awareness & education program called BearAware.  
These sessions usually occur every 2 weeks, but can be more spaced out depending on the new hires during a month.  The 
presentation is made over at HR & is after the Registrar talks about FERPA & before the campus tour.  We are currently 
re-vamping our slides because it has been a while since the presentation had a refresh.

Thank You,
Will Telfer, M.S.
Information Security Analyst
Information Technology Services
[sig]


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Lovaas,Steven
Sent: Monday, June 19, 2017 8:59 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] New Employee Security Training


Our new employee orientations run a couple times a month, and more often early in the Fall semester. When our training 
department revamped the new orientation format, everyone else went to videos, but I insisted on retaining my live 
presence. I get 10-15 minutes, which I spend on the basics (these days, mainly talking about social engineering and 
general situational awareness). I feel that it's really valuable to have everyone see me face-to-face, so I can answer 
questions and give up-to-the-moment examples. Lots of people greet me on campus based on their memory of my talk, so I 
know they were at least awake...



Steve


===================
Steven Lovaas
Information Security Officer
Colorado State University
steven.lovaas () colostate edu<mailto:steven.lovaas () colostate edu>
970-297-3707
===================

________________________________
From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of Ludwig, Linda <LUDWIGL () GRINNELL EDU<mailto:LUDWIGL () GRINNELL EDU>>
Sent: Monday, June 19, 2017 6:25 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] New Employee Security Training


We finally got a small slice of the new employee orientation. I have just 15 minutes so I do an Icebreaker that goes 
over a lot of possible problems in a very short time. I pair them up and give them the photo of a desk and they have to 
identify at least 12 infosec problems in the picture. I have attached the handout I give them with the solutions which 
we go over as a group. It's a quick way to cover a lot of little things in a short period of time. Then I give them 
some local higher ed examples of data breaches and the cost of the breaches. The main focus of the 15 minutes is to 
protect the data and how to contact InfoSec of anything suspicious.



Linda

*********************************
Linda L. Ludwig
Information Security Awareness Specialist
ludwigl () grinnell edu<mailto:ludwigl () grinnell edu>





From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas 
Carter
Sent: Friday, June 16, 2017 2:33 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] New Employee Security Training



Does anyone do IT security training as part of on-boarding new employees? If so, what do you cover? Who does the 
training (IT, HR, or?)? When is the training done? How well does it seem to work for you? What would you do differently?



We would like to implement something like this, but are afraid of overwhelming a new employee during their HR 
orientation. Something done a week or two later may have a better chance of sticking with the end user, but requires 
much more time and organization on our part.



Thomas Carter
Network & Operations Manager / IT

Austin College
900 North Grand Avenue
Sherman, TX 75090

Phone: 903-813-2564
www.austincollege.edu<https://linkprotect.cudasvc.com/url?a=https://urldefense.proofpoint.com/v2/url%3fu%3dhttp-3A__www.austincollege.edu_%26d%3dDwMFAg%26c%3dHUrdOLg_tCr0UMeDjWLBOM9lLDRpsndbROGxEKQRFzk%26r%3d3FWhhRZ86wLnJQbceVqVZiaCyjWq2cIkJzKZvEb4Ctw%26m%3dhgI7dvCMFsXgJaBpD0kA4UA_VFuNlZRnxJITwn2-Gog%26s%3dEiqU_FRisfrZEVqqOC81fSK2JjWPl7yC4S5aE3OjzJY%26e%3d&c=E,1,APgQAJK0dKcj1S4sVPXt_l7Zpn2J3aj7rDUfYy0BHTP0WxB8kCT48aCaoV0jnRTe0v8zaxg-R2gmKo73pDaA4E91YYEQsxieLbwlLvehIaeP&typo=1>