Information Security Training and Awareness

Overview

Training and Awareness is an integral function of the ISC Office of Information Security at Penn. In collaboration with Schools and Centers, the Training and Awareness program provides the community with an understanding of how to protect the University's computing assets and confidential information from unauthorized access. The program offers a selection of role-based training and awareness opportunities in compliance with the University Information Security and Acceptable Use Policies.  These training and awareness opportunities include:

• Information Security Training
  • Information Security Essentials Online Training - Three short training modules posted to Workday Learning aiming to raise awareness about:  
    • Computer Compromises
    • Passwords & Phishing
    • Lost or Stolen Data & Devices
  • Vendor Security Technical Assessment of Risk (V-STAR) Online Training
    • V-STAR webpage 
  • Security Logging Q&A Session

• Tips
  • Information Security and Privacy Tips
  • Secure Your Information for Students
  • Information Security Tips for Staff

• Events
  • National Cybersecurity Awareness Month (2024)
  • National Cybersecurity Awareness Month (2023)
  • National Cybersecurity Awareness Month (2022)
  • National Cybersecurity Awareness Month (2021)
  • National Cybersecurity Awareness Month (2020) 
  • National Cybersecurity Awareness Month (2019)
  • National Cybersecurity Awareness Month (2018)
  • Spring Kite Day
  • The University of Pennsylvania Risk and Resilience Conference (2024)

• Information Security Alerts
  • Meltdown and Spectre security vulnerabilities 
  • Gift Card Scams Hitting Penn
  • Zoombombing Allows Uninvited Guests to Join a Zoom Session 
  • Protect Yourself Against COVID-19 Scams

• Vendor Training
  • 2018 SANS Securing Windows and PowerShell Automation
  • 2020 SANS Cloud Security Architecture & Operations
  • 2024 SANS Hacker Tools, Techniques, and Incident Handling.

Resources

• Copyright and File Sharing
• Desktop Security 101
• Encryption
• Computer "Malware"
• Phishing & Spear Phishing
• Email Headers
• Secure Data Deletion
• Secure Share 
• Securing HP Printers
• Security for Applications with Confidential University Data 
• Data Security on Foreign Travel
• Security Liaisons