Educause Security Discussion mailing list archives

Re: Email Banner


From: Rick Haugerud <rhaugerud () UNL EDU>
Date: Wed, 24 Jun 2020 16:31:59 +0000

When we implemented in our environment a while back some of the feedback was that our message was too long and 
interfered with the subject line on mobile devices.

We shortened ours to what you see below in response to that feedback.

Rick

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of "Boyd, Daniel" 
<dboyd () BERRY EDU>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Wednesday, June 24, 2020 at 10:15 AM
To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Email Banner

Non-NU Email
________________________________
We have implemented an external email banner, as you can see below. While it has not made huge improvements in user 
behavior (and some users will just never “get it”) it has made a positive impact and I have (non-OIT) users who mention 
the fact that “that email had the big yellow banner on it” when discussing the validity of a given email.

I see it as another layer, but definitely not a silver bullet and there of course have been complaints leveled at it 
due to the fact that users can’t preview emails in the email list anymore because many emails start with the banner so 
they all look the same until they are opened.

But net positive effect so far.

Dan


Daniel H. Boyd (94C)
Director of Information Security
Office of Information Technology
Information Security Advisory Group Chair
Berry College
Phone: 706-236-1750
Fax:     706-238-5824
https://infosec.berry.edu<https://urldefense.proofpoint.com/v2/url?u=https-3A__infosec.berry.edu_&d=DwMFAg&c=Cu5g146wZdoqVuKpTNsYHeFX_rg6kWhlkLF8Eft-wwo&r=FRSH2KPV5vnGNmoYwqTNUnaJIFryR--U367k3eKJGXo&m=1KYrsYkUj-CzyDAlhKnfrbdldeyJCkBjE_fc3_Cz39I&s=wV-z3FxQJBCCvtfFbiFn6siMk1Di8ipOkTrdoi0qQBk&e=>

There are two rules to follow concerning your account passwords:
1. NEVER SHARE YOUR PASSWORDS WITH ANYONE (EVEN OIT!!!!)
2. If unsure, consult rule #1

Information Security wants to know what you want to know about! If there is a topic within information security you 
would like to know more about please let me know using any of my contact information above.



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Ballister, Mark
Sent: Wednesday, June 24, 2020 10:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Email Banner


CAUTION: This email originated from outside of the Berry College organization. Do not click links or open attachments 
unless you know the content is safe. Email infosec () berry edu<mailto:infosec () berry edu> if in doubt.
Good afternoon,

I am looking for information on who has implemented an external email banner and who has not.  For those that have, 
have you seen an improvement in user behavior around phishing?  Thank you for your time.

Thank you,
Mark

Mark J. Ballister, CPP | CISM | CISSP
Chief Information Security Officer (CISO)
University of Rochester
(585) 276-6200 (Office)
(585) 472-2361 (mobile)

[UR.4col.v2]


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMFAg&c=Cu5g146wZdoqVuKpTNsYHeFX_rg6kWhlkLF8Eft-wwo&r=FRSH2KPV5vnGNmoYwqTNUnaJIFryR--U367k3eKJGXo&m=1KYrsYkUj-CzyDAlhKnfrbdldeyJCkBjE_fc3_Cz39I&s=y7KC9QVlleelgPYPymfuVvsQARjIk8ePhh717fBsI_E&e=>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMFAg&c=Cu5g146wZdoqVuKpTNsYHeFX_rg6kWhlkLF8Eft-wwo&r=FRSH2KPV5vnGNmoYwqTNUnaJIFryR--U367k3eKJGXo&m=1KYrsYkUj-CzyDAlhKnfrbdldeyJCkBjE_fc3_Cz39I&s=y7KC9QVlleelgPYPymfuVvsQARjIk8ePhh717fBsI_E&e=>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: