The Information Security Office (ISO) continuously strives for daily operational excellence to ensure the confidentiality, availability, and integrity of University of Utah information technology systems and data through appropriate information security resources and best practices.
Recent News
-
IT security tip: Slow down. Look closer. Think before you click.
More than 90% of successful cyberattacks start when you click/select an unfamiliar link in phishing email. One simple habit can stop many cyberattacks before they start: Pause and verify the source before clicking.
-
UIT celebrates 2 major cybersecurity toolset milestones
UIT teams recently celebrated the successful implementations of the university’s default deny firewall policy and cybersecurity toolset for each of UIT Campus Computer Support’s (UCCS) customers.
-
5 questions to ask before sharing university data with a third-party app
University of Utah users should review the need for and terms of third-party applications, and request an institutional review if necessary, before granting them access to university resources and data.
Tips & resources |
|
University-approved platforms for restricted and sensitive data
Due to the level of risk associated with restricted and sensitive data, the university has approved only a select number of platforms for those data types. Our IT security matrix provides an overview of some university and personal platforms (e.g., Adobe products, Canvas, Microsoft Copilot, and Zoom healthcare license) and the data types for which they are approved.
Best practices for travelers
Travel more securely whether you’re going on a roadtrip or on an international adventure. Tips include cybersecurity basics and temporary measures to better protect your information and devices while you are away from home.
Beware of phishing, which is becoming more popular, with these tips.
Phishing lessons
You realize it a moment too late: You fell for a malicious email, opened a bad link, and entered your password on a suspicious site. You’ve just been phished! Now what?
If you open a questionable link and enter login credentials, immediately change your password in the CIS portal — and in any personal accounts that may be compromised. In addition, contact the ISO’s Security Operations Center at soc@utah.edu to notify information security staff.
Whenever you receive a phishing attempt through a university email account, report it. Use the Phish Alert button or forward the email as an attachment to phish@utah.edu.
Secure your passwords!
Is your password secure enough?
Easy-to-guess, “weak” passwords are the main way criminals gain access to system information. Keeping passwords safe and hard to guess is critical to ensure information is not compromised.
Password guidelines TEST PASSWORDGuide: change password (login required)Guide: change password (Public access)
U of U virtual private networks
To access certain resources on the University of Utah network, campus employees and students who work or study remotely and hospital/clinics personnel who work remotely should use a secure virtual private network (VPN).
- Palo Alto Global Protect
- Departmental VPN
Encrypted emails
When sending federally protected personal health information (PHI), personally identifiable information (PII), or other restricted data via email, the communication must be encrypted. To send an encrypted message from a UMail account, add one of the following to the subject:
- PHI
- [secure]
- [encrypt]
Cyberextortion schemes
In a typical digital extortion attempt, a criminal pretends to be someone else, lulls the victim into a false sense of security, and then urges them to transfer money or provide private information. Because most schemes are delivered via deceptive emails, texts, and phone calls, the ISO recommends cybersecurity training and an awareness of social engineering, phishing, smishing, and vishing.
Telecommuting best practices
Compared to working on campus, telecommuting can present different information security risks, especially when it comes to network security, data storage, and physical security. By following these best practices (and university guidelines), you can help protect yourself and the university from cyberthreats.
Helpful links
- Report an IT security incident
- U of U Policy 4-004: Information Security Policy — Questions? Contact ISO-GRC@utah.edu.
- Org chart: ISO comprises four areas — Enterprise Security; Governance, Risk & Compliance (GRC); Identity & Access Management (IAM); and ISO Program Management.