Educause Security Discussion mailing list archives
Re: Awareness Training
From: "Dickey, A. (Antoinette)" <Antoinette.Dickey () VOYA COM>
Date: Tue, 28 Jan 2020 22:09:40 +0000
Proofpoint<https://www.proofpoint.com/us> is the application we purchased last year. I am having a lot of fun with it. We use it for a number of things. Phishing Tests * We load the email addresses into Proofpoint and send out the phishing tests. * We can auto enroll users that failed phishing tests into a specific Proofpoint module. Or we can manually add them to our internal training app. * Proofpoint has approvals from companies to use their logos in phishing tests. Examples are FedEx, Starbucks, etc. These are more realistic. The FedEx test almost got me last week. I had not ordered anything. I might have clicked if it was December. I sent Christmas presents to all the grandkids. Security Education Platform * Assessments o You can assign users to an assessment to determine your baseline. o Assessments range from Security Essentials to specific ones on passwords, phishing, security on the go, etc. * Training Modules: o You can send the link to Proofpoint's training module to users. Users will take the training in Proofpoint. o You can customize the training. Add your logo or change the wording. o You can export Proofpoint's module to your internal training app. We are exporting into SCORM format and loading it into Cornerstone app. * Security Awareness Materials o Posters o Short videos (2-3 mins) Toni Dickey, CISA, CRISC IT Security Awareness & Training Lead Office of the CISO Technology Risk & Security Management Voya Financial(tm) One Orange Way A2S, Windsor, CT 06095 Office: (860) 580-1997 Email: Antoinette.Dickey () voya com<mailto:Antoinette.Dickey () voya com> From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Jeffrey Miller Sent: Tuesday, January 28, 2020 04:32 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Awareness Training You might look into Infosec Institute. Jeff Miller Office of Information Technology Director, Information Security University of Central Oklahoma (405) 974-2697 jmiller25 () uco edu<mailto:jmiller25 () uco edu> https://technology.uco.edu ________________________________ From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> on behalf of Pete, Andrew <000000d06e28c017-dmarc-request () LISTSERV EDUCAUSE EDU<mailto:000000d06e28c017-dmarc-request () LISTSERV EDUCAUSE EDU>> Sent: Tuesday, January 28, 2020 3:20:56 PM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> Subject: Re: [SECURITY] Awareness Training I'm specifically looking for a training platform like KnowBe4 that we can use to assign and track training modules to employees. I'm still trying to decide what I want out of the platform which is why I asked a more broad question. I would like something that covers basic information security topics including social engineering. Ideally I'd like something that also has training on topics related to specific compliance such as PCI, GDPR, etc. From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> On Behalf Of Younes, Wiam H Sent: Tuesday, January 28, 2020 3:05 PM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> Subject: Re: [SECURITY] Awareness Training This message originated outside of New England Institute of Technology. Use caution when opening attachments, clicking links or responding to requests for information. Hi Pete, When mentioning an awareness system, are looking to raise awareness in a specific area, e.g., Phishing? An Information Security Awareness program encompasses an array of educational and communication methods to raise your constituents' knowledge level on key security issues for the protection of their personal and the institution's information assets. EDUCAUSE offers online material on establishing an Information Security Awareness Program at https://www.educause.edu/focus-areas-and-initiatives/policy-and-security/cybersecurity-program/resources/information-security-guide/toolkits/security-awareness-quick-start-guide<https://urldefense.com/v3/__https:/www.educause.edu/focus-areas-and-initiatives/policy-and-security/cybersecurity-program/resources/information-security-guide/toolkits/security-awareness-quick-start-guide__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqRR9f5Zl$> You may also consider joining the monthly EDUCAUSE Awareness and Training group, where Information Security Awareness professionals working in Higher ED meet to discuss best practices, processes, requirements and innovative Awareness & Training methods. Valerie Vogel at vvogel () educause edu<mailto:vvogel () educause edu> can send you a meeting invite if interested. Please don't' hesitate to reach out if I can be of any assistance. Thank you, Wiam -------------------------------------------------------------------------------------- Wiam Younes, Ph.D. Information Security Training Officer Information Systems and Computing|Office of Information Security 3401 Walnut Street|Suite 232A| Philadelphia|PA. 19104 W.215.898.0040| F.215.573.2037|Email: younes () upenn edu<mailto:younes () upenn edu> [cid:image001.jpg@01D5D5FA.6ADCC050] From: Pete, Andrew<mailto:000000d06e28c017-dmarc-request () LISTSERV EDUCAUSE EDU> Sent: Tuesday, January 28, 2020 12:08 PM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> Subject: [SECURITY] Awareness Training Hello Everyone, We are looking to implement an awareness training system. I'm curious what other institutions are using and any recommendations on features/capabilities. Thanks in advance. Andrew Pete Information Security Architect New England Institute of Technology One New England Tech Boulevard East Greenwich, RI 02818-1205 401-780-4460 (Direct) apete () neit edu<mailto:apete () neit edu> [NEIT_Full_Stack_H_White_BG_PNG1] ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqXbwygiG$> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqXbwygiG$> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqXbwygiG$> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!IOMqlNbgARDDXg!SP_hIs36hW_S4OgB3CNj1GZEBMqFx7covLVMSz49FdIgsRvgNP_vC3l4YGIrqXbwygiG$> --------------------------------------------------------- NOTICE: The information contained in this electronic mail message is confidential and intended only for certain recipients. If you are not an intended recipient, you are hereby notified that any disclosure, reproduction, distribution or other use of this communication and any attachments is strictly prohibited. If you have received this communication in error, please notify the sender by reply transmission and delete the message without copying or disclosing it. ============================================================================================ ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Awareness Training Pete, Andrew (Jan 28)
- Re: Awareness Training King, Ronald A. (Jan 28)
- Re: Awareness Training Ben Woelk (Jan 28)
- Re: Awareness Training Younes, Wiam H (Jan 28)
- Re: Awareness Training Pete, Andrew (Jan 28)
- Re: Awareness Training Vince Bonura (Jan 28)
- Re: Awareness Training Jeffrey Miller (Jan 28)
- Re: Awareness Training Dickey, A. (Antoinette) (Jan 28)
- Re: Awareness Training Rick DeCaro (Jan 28)
- Re: Awareness Training Rob Milman (Jan 28)
- Re: Awareness Training Pete, Andrew (Jan 28)
- Re: Awareness Training Ben Woelk (Jan 29)
- Re: Awareness Training Susan Hafer Richman (Jan 29)
- Re: [External] Re: [SECURITY] Awareness Training Thomas Dugas (Jan 29)
- Re: [External] Re: [SECURITY] Awareness Training Bernard, Christopher (Jan 29)
- <Possible follow-ups>
- Re: Awareness Training Madl, Michael (Jan 30)
- Re: Awareness Training Pardonek, Jim (Jan 30)