As classes resume for the spring semester, UCF InfoSec and Privacy Compliance want to remind employees of the importance of securing university data. Cyber criminals continue to target university employees, sending phishing emails in an attempt to steal account credentials, sensitive university data, and personal information.
- How can I protect my accounts?
- set a strong, unique password for each account and never share your password with anyone
- enable Multi-Factor Authentication (MFA) on all accounts that support it. Learn how to enable MFA on your UCF Microsoft 365 email: https://infosec.ucf.edu/mfa
- before entering your username and password on a site, closely examine the website address to ensure it’s legitimate
- How can I protect UCF data?
- review UCF Policy 4-008 and be sure you know what Restricted and Highly Restricted data is, how it can be protected, and where it can be stored
- do not store university data on personal devices or personal cloud storage
- always use the UCF VPN whenever accessing sensitive UCF data while off campus: https://ucf.service-now.com/ucfit?id=kb_article&sys_id=3ec34f471b3b48d05cd6b912cd4bcb74
- when working with university data, make sure you are in an area where others cannot view your device screen or access printed materials
- do not use personal devices or personal email to conduct university business
It’s important to remain vigilant of threats to our accounts and the data with which UCF is entrusted. If you receive a suspicious email, report it using the Phish Alert Button. If you clicked a link and provided your account credentials on a site you now suspect was malicious, change your password immediately and contact the Security Incident Response Team at SIRT@ucf.edu .
You can help us keep UCF secure, and UCF InfoSec is here to help you. If you have any questions about information security, please contact our office at infosec@ucf.edu .
Thank you,
UCF Information Security Office
infosec@ucf.edu
Twitter: @UCF_InfoSec
https://infosec.ucf.edu