Explore
Write
Chat
Call
Information Security
Scam Types
Service navigation
Scams used to be easier to detect without worry. A Nigerian prince asks for a few hundred dollars to give you access to his fortune. But those days are gone, and scammers are in a constant arms race with cybersecurity for your sensitive information. Learn about the different types of scams and how to deal with them.
-
Context is Everything!
One definition of context is the circumstances that form the setting for an event, statement, or idea and in terms of which it can be fully understood and assessed. It isalso one of the reasons that every cyber security professional respond with, “…it depends” when asked about a control in a security plan. UT Policy requires…
-
Are My Documents Secure in the Cloud?
With the increased use of cloud storage (Google Drive, Microsoft OneDrive, Dropbox, Evernote, etc.), individuals should take extra precautions to ensure that both personal data and university data are protected. Cloud storage can reduce the risk involved with physically carrying data around on removable media. Users often have on-demand access to their information anywhere, and…
-
Look, No Hands—Let OIT Continuously Monitor Your Systems
One of the responsibilities of every user of UT’s IT resources is to continuously monitor their UT Owned workstations, laptops, and servers. What does that even mean? HOW? WHO? Who does ANYTHING continuously? These two words, continuous monitoring,” would imply that you (or somebody) should be looking at a computer(s) 24 hours a day, 365 days per year. Thankfully, this…
-
Plans and Programs and Controls, Oh My!
Information security conversations often include words like “IT security plans,” “systems,” and “program plans.” What do these terms mean in the context of cyber security, and why should we care? Three reasons WHY we are talking about cyber security: Human Resource (HR) or Fiscal (FI) policies provide a governance structure for conducting university business, the…
-
How Do Cybercriminals Make an Email Sound so Authentic?
Email or phone call scams are not new; cybercriminals have been attempting to fool people for years. Older scams like “You Won the Lottery” or the infamous “Nigerian Prince” are created as generic messages sent out to millions of people. The non-specific nature of these messages makes them easier to spot. More recently, personalized scams…
-
Security Topic of the Week
Is your workstation or laptop running slow? Does it take forever for an application to start? Do you return to your desk following short breaks and often find that your computer has restarted and is displaying some sort of cryptic message about a problem? These are all signs that your machine may be compromised or infected. Security incidents…
-
File Sharing Options for Sensitive Information
We regularly receive questions about sharing or storing sensitive information. While we have several recommendations, first, let’s talk about why you should be concerned about how you share or store sensitive information. ALL users are responsible for ensuring that their use of sensitive information services complies with laws, regulations, and policies where applicable; it is EVERYONE’s responsibility.…
-
Steps for Staying Secure in These Scary Times
As technology gains a more important role in our lives, it also grows in complexity. Given how quickly technology changes, keeping up with security advice can be confusing. It seems like there is always new guidance on what you should or should not be doing. However, while the details of how to stay secure may…
-
Incident what?
Information Security type individuals, as well as auditors, frequently talk about “Incident Response.” The term gets mentioned so much that it may be assumed that everyone knows what the term means. Incident response is an organized approach to addressing and managing the aftermath of a security breach or cyberattack. The goal of an Incident Response…
-
What IS Social Engineering?
Social engineering is the art of manipulating people, so they give up confidential information or take an action that could result in giving up confidential or sensitive information. The types of information these criminals are seeking can vary, but when individuals are targeted, the criminals are usually trying to trick you into giving them your…