Security Awareness

Agenda

• Computer security
• Physical security
• Remote access
• Infrastructure
• Acceptable use

Computer Security

• Phishing & spyware
• Passwords
• Viruses & malware
• Patches
• BYOD
• Instant messaging

Physical Security

• Keys/key-cards/building access
• Remote access
• Printer/copier output
• Social engineering

Remote Access

• Web-access
• IPSec access
• BYOD

Infrastructure

• Unified threat management
• Web-filtering
• Data backup
• Data loss prevention

Acceptable Use

• E-mail
• Web-surfing/internet
• Sensitive information
• Instant messaging
• BYOD

Coming In 2016

• 2-factor authentication
• 90-day password change cycles plus complexity requirement
• Validation & authorization of 3rd party services in use by staff
• Revamped acceptable use & personal equipment policies

Guidance & Questions