Re: Identifying 3 CyberSecurity Literacy Topics for Students

[Ken Munro <Ken.Munro () MSVU CA>]

Hi.

I am focusing on three main areas with students and faculty for this upcoming term:


  1.  Password safety and hygiene (which ties into phishing awareness in point 2 below), including wifi admin accounts, 
SSIDS, and wifi passwords
  2.  Scam awareness/social engineering, including phishing, vishing, spear phishing, BEC, USB stick attacks, tax 
scams, job scams, etc.
  3.  Software safety, the importance of installing updates for software , OS, antivirus, wifi firmware, etc.

These three were the main areas suggested to focus on in a SANS remote workforce training webinar I attended over the 
summer, and I think they make sense, especially with our campus being 99% remote this fall.

You could fit social media safety under the scam awareness section as information posted online could be used in a 
social engineering attack. There is also the reputational side of social media awareness, but I think of that as more 
of life skills than hard cybersecurity, albeit a good way to motivate people to be more careful about their online 
identities.

Cheers.

Ken Munro

________________________________________
Ken Munro
Security Compliance and Training Specialist
Information Technology and Services
Mount Saint Vincent University
166 Bedford Highway
Halifax, NS, Canada, B3M 2J6
(902) 457-6150
ken.munro () msvu ca<mailto:ken.munro () msvu ca>

Confidentiality Notice: This email may be private and confidential. If you have received this e-mail by mistake, please 
immediately notify the sender by e-mail or telephone, delete it from your system, and do not copy or distribute it.

Phishing Warning: IT&S does not request passwords or other personal information via email. Messages requesting such 
information are phishing attempts and should be deleted.


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Jason Edelstein
Sent: Monday, August 17, 2020 5:27 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Identifying 3 CyberSecurity Literacy Topics for Students


[ Email originated outside of MSVU, use extra caution. ]
I might, even though it's security-focused and these aren't the same thing... streeeeetch Todd's #3 (and many others 
who have said similar, I'm feelin' Eric Weakland's phrasing very much!) just enough to make the "privacy and security" 
label stick to this presentation. One of the reasons all of these things matter so much is precisely because of their 
privacy impacts - it's a good hook.

-je-

On 8/17/20 2:23 PM, Todd Watson wrote:
Hi Cathy,

From my perspective:

  1.  Social engineering
  2.  Account access controls to include password hygiene and MFA
  3.  Consequences to personal cybersecurity from over-sharing on social media

Hope these help!

Regards,

Dr. W. Todd Watson, CISSP
Information Security Officer
University System of Georgia
Cybersecurity
706-583-2400
todd () usg edu<mailto:todd () usg edu>

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU><mailto:SECURITY () LISTSERV 
EDUCAUSE EDU> on behalf of Cathy Hubbs <hubbs () AMERICAN EDU><mailto:hubbs () AMERICAN EDU>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU><mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>
Date: Monday, August 17, 2020 at 1:53 PM
To: "SECURITY () LISTSERV EDUCAUSE EDU"<mailto:SECURITY () LISTSERV EDUCAUSE EDU> <SECURITY () LISTSERV EDUCAUSE 
EDU><mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Identifying 3 CyberSecurity Literacy Topics for Students


 CAUTION: This email originated from outside of the USG System Office. Use caution replying or supplying information, 
clicking links or opening attachments. If you suspect the message is fraudulent, contact the Enterprise Service Center 
at 706-583-2001 or helpdesk () usg edu<mailto:helpdesk () usg edu>.

Good afternoon colleagues,
I have an opportunity to engage undergrad students in a single zoom session – introducing them to 3 cyber security 
literacy topics. I thought I would leveraage the brainpower of the HE community to hear what top 3 topics you would 
focus on if given this opportunity.

Thank you!

Cathy

Cathy Hubbs
Chief Information Security Officer
American University, Washington DC
Office of Information Technology



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.com/v3/__https:/nam02.safelinks.protection.outlook.com/?url=https*3A*2F*2Fwww.educause.edu*2Fcommunity&data=02*7C01*7Ctodd*40USG.EDU*7Cdfce397c2809494b5db608d842d67418*7C4711f877fb3a4f11aaab3c496800c23d*7C0*7C0*7C637332836127337559&sdata=E3G3DQoBTWkB6Q3UUdU8NAX8o48Zy*2Fom2v1ZllSOfdY*3D&reserved=0__;JSUlJSUlJSUlJSUlJSU!!BpyFHLRN4TMTrA!sK_k9DpUIdhrXUAVDlwB41DzZbEbsWVQiyQiOmMpnAjsemGT7peV6eyNAdGpMBvFfQ$>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://urldefense.com/v3/__https:/www.educause.edu/community__;!!BpyFHLRN4TMTrA!sK_k9DpUIdhrXUAVDlwB41DzZbEbsWVQiyQiOmMpnAjsemGT7peV6eyNAdELD18blg$>



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community
-->

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community