Richmond Home

cybereveryone

Own.IT - Cybersecurity Is Everyone's Job

Higher education institutions use lots of data every day. Payroll information, health insurance information, payment card information, and student information that includes financial aid information are just a few of the most sensitive data elements that are shared. These data elements are shared within institutions and with the vendors we do business with daily. It is not just IT departments that need to understand the information security requirements needed to protect these data.

The University’s online safety and security is a responsibility we all share. As the lines between our campus and personal lives become increasingly blurred, it is more important than ever to be certain that smart cybersecurity hygiene carries between the two.

  • Cybersecurity at UR is Everyone’s Business:  It’s not just the job of Information Services to ensure online safety on campus. Creating a culture of cybersecurity means ALL of the UR community knows how to protect themselves and the University by understanding cyber risks as the campus grows and adds new technologies.
  • Check It Before You Click It:  Whether at work or in their personal lives, everyone should know not to open suspicious links in email, texts, tweets, posts, online ads, messages or attachments – even if they know the source.  Verify you know the sender, check the link to ensure it is the correct web address, and verify the message is expected.
  • Create a Recovery Strategy:  Put in place a system – either in the cloud or via separate hard drive storage – that makes electronic copies of vital business information on a regular basis.  On campus, backup your data in Box.  At home, make regular backups of all your important docs, files and photos to an external hard drive or personal cloud storage.  [Register for the Data Backup class being held Thursday, October 31 in THC Room 321]. 
  • Use Unique Passwords or Passphrases:  Password reuse for multiple accounts is one of the most commons ways accounts are hijacked.  If your credentials are stolen for one account, hackers can gain access to other accounts that use the same login information when passwords are reused across multiple sites.  Access to more sensitive accounts, such as financial or UR accounts, should be secured with stronger passwords that are considerably different from ones used elsewhere.  A password/passphrase should be easy for you to remember and difficult for anyone else to guess (e.g., PurpleApplesBloom4Me! or UW1llRunA10k$00n)

Additional Resources

Consider using a password manager like LastPass® to help manage account credentials.

Password Guidance from the National Institute of Standards and Technology for creating a strong password/passphrase: https://www.nist.gov/video/password-guidance-nist-0