Re: [External] Re: [SECURITY] Email Banner

[Mark Rogowski <m.rogowski () UWINNIPEG CA>]

Over here, the CIO makes the decision.  She made it simple and clear:  If any “mail service” is not controlled by a 
University department it receives a banner.  Researches and other arms-length organizations/groups choosing to go their 
own way are considered outside entities.

Mark Rogowski  CISSP, CISM
IT Security
University of Winnipeg
204-786-9034



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of Phillip Romig III <promig3 () MINES EDU<mailto:promig3 () MINES EDU>>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>>
Date: Thursday, June 25, 2020 at 5:37 PM
To: <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: Re: [SECURITY] [External] Re: [SECURITY] Email Banner

If the group will indulge me, I’d like to ask a follow-up question.  Of those who do use a banner or subject line, who 
decides who has the authority to say what messages should be whitelisted (if any).  We have the usual suspects using 
external email services – SaaS and the like. Some are easy decisions (messages from our LMS for example don’t get 
tagged) while others are a controversial mix of political and technical issues.

Do you have an authority who can say yes/no to a whitelisting request, and if so who?

Thanks
Phil

P.S. I realize it is tacky to ask a followup question without responding to the initial question, so you can see an 
example of both our subject line modificaton and our banner in the attached message.

--
Phillip R. Romig, Ph.D.
Chief Information Security Officer
(303) 273-3866


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of "Ballister, Mark" <Mark_Ballister () URMC ROCHESTER EDU<mailto:Mark_Ballister () URMC 
ROCHESTER EDU>>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>>
Date: Thursday, June 25, 2020 at 10:01 AM
To: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE 
EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: [External] Re: [SECURITY] Email Banner

CAUTION: This email originated from outside of the Colorado School of Mines organization. Do not click on links or open 
attachments unless you recognize the sender and know the content is safe.

Thank you all for your responses on the email banner, it was appreciated and produced the data I was looking for.

Thank you,
Mark

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Ballister, Mark
Sent: Wednesday, June 24, 2020 10:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Email Banner


Good afternoon

I am looking for information on who has implemented an external email banner and who has not.  For those that have, 
have you seen an improvement in user behavior around phishing?  Thank you for your time.

Thank you,
Mark

Mark J. Ballister, CPP | CISM | CISSP
Chief Information Security Officer (CISO)
University of Rochester
(585) 276-6200 (Office)
(585) 472-2361 (mobile)

[UR.4col.v2]


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cpromig3%40MINES.EDU%7C19b4a195e4d44e939c2308d8192101f8%7C997209e009b346239a4d76afa44a675c%7C0%7C0%7C637286976850485490&sdata=dDpX7xQB4VBRoKZBjKjlK%2BXqAmIN0buhxoVFsX64pJM%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community