The Information Security Office (ISO) continuously strives for daily operational excellence to ensure the confidentiality, availability, and integrity of University of Utah information technology systems and data through appropriate information security resources and best practices.
Recent News
-
5 questions to ask before sharing university data with a third-party app
University of Utah users should review the need for and terms of third-party applications, and request an institutional review if necessary, before granting them access to university resources and data.
-
IT disaster recovery at the U: Planning for the 'what ifs'
In IT, a disaster is any event that seriously disrupts the systems the university depends on. Recovery is the planning and practice that gets those systems back up quickly. Here’s how campus IT and U of U Health are working together to build that capability.
-
IT Rendezvous doubles down on shared knowledge
The second annual University of Utah IT Rendezvous held September 15 drew nearly 200 IT staff from across the university — about half of them first-time attendees — for a day of keynotes, panels, and breakout sessions.
Tips & resources |
|
University-approved platforms for restricted and sensitive data
Due to the level of risk associated with restricted and sensitive data, the university has approved only a select number of platforms for those data types. Our IT security matrix provides an overview of some university and personal platforms (e.g., Adobe products, Canvas, Microsoft Copilot, and Zoom healthcare license) and the data types for which they are approved.
Best practices for travelers
Travel more securely whether you’re going on a roadtrip or on an international adventure. Tips include cybersecurity basics and temporary measures to better protect your information and devices while you are away from home.
Beware of phishing, which is becoming more popular, with these tips.
Phishing lessons
You realize it a moment too late: You fell for a malicious email, opened a bad link, and entered your password on a suspicious site. You’ve just been phished! Now what?
If you open a questionable link and enter login credentials, immediately change your password in the CIS portal — and in any personal accounts that may be compromised. In addition, contact the ISO’s Security Operations Center at soc@utah.edu to notify information security staff.
Whenever you receive a phishing attempt through a university email account, report it. Use the Phish Alert button or forward the email as an attachment to phish@utah.edu.
Secure your passwords!
Is your password secure enough?
Easy-to-guess, “weak” passwords are the main way criminals gain access to system information. Keeping passwords safe and hard to guess is critical to ensure information is not compromised.
Password guidelines TEST PASSWORDGuide: change password (login required)Guide: change password (Public access)
U of U virtual private networks
To access certain resources on the University of Utah network, campus employees and students who work or study remotely and hospital/clinics personnel who work remotely should use a secure virtual private network (VPN).
- Palo Alto Global Protect
- Departmental VPN
Encrypted emails
When sending federally protected personal health information (PHI), personally identifiable information (PII), or other restricted data via email, the communication must be encrypted. To send an encrypted message from a UMail account, add one of the following to the subject:
- PHI
- [secure]
- [encrypt]
Cyberextortion schemes
In a typical digital extortion attempt, a criminal pretends to be someone else, lulls the victim into a false sense of security, and then urges them to transfer money or provide private information. Because most schemes are delivered via deceptive emails, texts, and phone calls, the ISO recommends cybersecurity training and an awareness of social engineering, phishing, smishing, and vishing.
Telecommuting best practices
Compared to working on campus, telecommuting can present different information security risks, especially when it comes to network security, data storage, and physical security. By following these best practices (and university guidelines), you can help protect yourself and the university from cyberthreats.
Helpful links
- Report an IT security incident
- U of U Policy 4-004: Information Security Policy — Questions? Contact ISO-GRC@utah.edu.
- Org chart: ISO comprises four areas — Enterprise Security; Governance, Risk & Compliance (GRC); Identity & Access Management (IAM); and ISO Program Management.