Re: Security/Privacy Awareness click through

["Flynn, Gary - flynngn" <flynngn () JMU EDU>]

Dick,

During our account activation and 90 day password change process, people are
exposed to our security awareness content. Content for graduates and
applicants is minimal and consists of the following language along with some
screenshots of sample phishing messages:

Continued use of your JMU eID account, binds you to the  JMU Appropriate Use
Policy  <http://www.jmu.edu/JMUpolicy/1207.shtml>  and all local, state, and
federal laws concerning computer and information use.

Your JMU eID password is private and should not be shared with anyone or any
other service.

Password scams are common. JMU WILL NEVER ASK FOR YOUR PASSWORD. NEVER GIVE
IT TO ANYONE FOR ANY REASON. Two of the thousands of scams we see yearly are
shown below as examples.







From:  <Jacobson>, Dick <dick.jacobson () NDUS EDU>
Reply-To:  The EDUCAUSE Security Constituent Group Listserv
<SECURITY () LISTSERV EDUCAUSE EDU>
Date:  Monday, March 11, 2013 5:06 PM
To:  "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Subject:  [SECURITY] Security/Privacy Awareness click through

> I sent this to the Policy  Discussion list last week  and received only one
> reply.  Any more examples are appreciated.
>  
> For several years we have had an awareness "quiz" in place that individuals
> needed to complete before gaining access to our IT services.  I have been
> asked to come up with verbiage that would accompany a click-through that would
> still allow us to hold our users legally responsible for IT activity under
> their name/identity.  There appears to be a big rush on this so I am asking
> what some of you use at your institutions.
>  
> Thanks in advance for your help
>  
>  


-- 
Gary Flynn
Security Engineer
James Madison University

Attachment: smime.p7s
Description: