The greatest perceived information security risk faced by organizations is human fallibility. Mitigation of this risk is typically addressed by the implementation of policy and procedures, technical solutions such as firewalls and anti-malware software, and security awareness training. While the organization is in the process of addressing the policy/procedure and technical side of the human equation, a comprehensive security awareness program is critical to protecting OSU's data systems and community.
Dave Nevin, IT Manager with Information Services, is leading IS's security awareness campaign.
The initial stage of the Security Awareness Program is the development of a website. Committee members were identified to vet the content of the site. Information will specifically target OSU students, employees, and computing professionals. The student website launched on September 23, 2011; visit it at oregonstate.edu/be_aware. Information for employees and computing professionals will be added in 2013.
In-person training for personnel dealing with information classified as "privileged" began Fall Term during 2011 Training Days and will continue throughout the 2013 fiscal year.
Training, either in person or on the website, will concentrate on the following areas:
- Familiarization with the Acceptable Use and Information Security Policy and Procedure Manual
- Threats to and vulnerabilities of information systems
- How to identify and protect Protected Information
- Federal and State Laws regarding data, including copyright and personal privacy
- How, and to whom, to report security incidents
- Best practices as an end-user
Task Force Members
The task force that initiated this campaign was as follows. The initial task force has since disbanded.
- Dave Nevin, Technology Support Services (Chair)
- Jos Accapadi, Central Web Services
- Mike Altimus, College of Forestry
- Mark Cohen, College of Science
- Alec Dhuse, Network Engineering
- Tyler Pruitt, Student representative
- Paul Schoening, OSU Foundation
- Brian Staffenson, University Housing and Dining Services
- Doug Weir, College of Business
- Derek Whiteside, Enrollment Management