12:31 p.m., Oct. 6, 2009----During October, National Cyber Security Awareness Month, University of Delaware Information Technologies (IT) is reminding the University community of the importance of following good computer security practices.

THIS STORY

E-mail

Print

Twitter

“One of the most important things for everyone at UD to remember is that we all have confidential information we need to protect,” Scott Sweren, the University's Information Security Officer, said. “Individuals need to be concerned not only about their personal, non-public information (PNPI), but also about other people's PNPI they hold. Specifically, as employees of the University, faculty and staff have a responsibility to protect PNPI in accordance with University policy.”

Protect your own PNPI

“By now, nearly everyone on campus knows the basics of keeping their computer software up-to-date,” Ron Nichols, manager, IT-Client Support and Services, said. “Doing so is essential to protecting the information on the computers as well.”

According to the IT Help Center's Web site, everyone at UD should make sure to keep up to date the following on their computers:

• Operating system;
• Anti-virus software;
• Web browser;
• Firewall software;
• Anti-spyware software (Windows XP systems); and
• Application programs (e.g., Microsoft Office, Adobe Creative Suite, etc.)

“Many of the updates patch security vulnerabilities on individual computers,” Nichols said.

“Using strong passwords is another component in protecting the information you store on a computer,” said Kathy Beardsley, manager, IT Help Center. “In addition to having a good password for UDelNet and e-mail, you need to have a strong password on your desktop or laptop.”

Beardsley added that many faculty, students and staff fall for “phishing scams” every week. “Unscrupulous people bombard the campus with e-mail designed to harvest your UDelNet ID, password, Social Security Number (SSN), bank information, credit card information and birth date. When you receive this kind of e-mail, never reply to it. Delete it,” she said.

Protect others' PNPI -- and follow the law

Much of the information faculty and staff have on their systems is covered by the Family Education Rights and Privacy Act (FERPA), a law that requires the University to protect student information and certain family information in order to receive certain federal funding.

According to Sweren, UD has extended the definition of PNPI to include other information covered by federal regulations. “Basically, any information about someone's health, finances, academic record, and personal life that can identify an individual needs to be protected,” he said.

UD has prescribed methods of protecting PNPI. (Visit the PNPI Web page for more information.) The basic steps to ensure PNPI is appropriately protected include the following:

1. Encrypt transmissions of electronic information containing PNPI, including e-mail.
2. Whenever possible, store PNPI on servers configured to protect sensitive information, not on your own computer.
3. If you must store PNPI on a personal computer, encrypt the information.
4. Purge or delete PNPI when no longer needed.
5. Have departmental systems reviewed regularly. Contact the IT Help Center at 831-6000 to schedule a review.

“UD has a good record of protecting private information,” Sweren said. “However, since 2005, we've had 17 incidents that required notification of individuals whose personal information was accidentally revealed. Even though, to the best of our knowledge, none of these incidents has led to fraud, investigating each incident diverted University resources away from other tasks.”

For more information, see the following:

UD's National Cyber Security Awareness Month Web site

Five UD-produced video tips on identity issues

UD's Protecting PNPI Web site

UD's identity theft resources

IT warns of “phishing” scam

UD's anti-phishing advice