“A Campus Culture of Cybersecurity” reveals innovative ways that these organizations educate and motivate students, faculty and staff to follow good security practices.
HARVARD RECRUITS “SECURITY INSIDERS”
Two-factor log-in, compulsory IT training, security orientations and a rigorous communications campaign are all part of Harvard’s cybersecurity strategy. Key to success is tailoring this strategy to match department needs, such as safeguarding healthcare data and human-subject research information.
To help departments choose the right security-awareness strategies, Harvard assigns “Security Insiders” (typically department administrators, assistants and faculty) who distribute communications material from the university’s IT office. In addition to raising cybersecurity awareness, Security Insiders also provide guidance for categorizing, sharing, storing and disposing of data.
Director, Information Security Education & Consulting
RIT KICKS OFF A MARTIAL-ARTS THEME
Intended to make security awareness fun, RIT created “Digital Self Defense Dojo.” This online training program features the institute’s tiger mascot in a martial-arts robe and the latest security awareness topics. Trainees can earn various belts for identifying cybersecurity threats and responding to them. They are also entered into drawings for gift cards to the campus store.
The dojo is part of an annual communications plan that RIT’s information-security office creates to determine which topics need to be emphasized, based on current risks and departmental needs. Other outreach efforts include social-media posts, graphic communications and simulated phishing email.
ONLINE GAMING AT TEXAS A&M
Each October, Texas A&M releases online games designed to encourage security-mindedness among university students, faculty and staff. The most current game is based on the Life board game. Participants who successfully avoid clicking on random pop ups and update their antivirus so#ware receive prizes ranging from football towels to frozen yogurt. The 10 highest scorers are entered into a drawing to receive an Apple Watch.
During the balance of the year, Texas A&M raises awareness via social media, newsletters and emails. The university also hosts an annual conference that draws national industry experts to talk about cybersecurity trends.
Vice President Communities and Research