June 1, 2023

UCSF IT Security

Awareness News You Can Use

Monthly Articles, Contests, and Upcoming Events

June's Quiz is on Following UCSF Policies to Meet Regulations

Please read "Follow UC Policies to Meet Regulatory Requirements" and take the monthly quiz. All UCSF faculty, staff, contractors, students, and affiliates who take the quiz will be entered in a drawing for one of six $50 Amazon gift cards.

Remember, you can also visit our previous security awareness articles and take the quizzes. Visit our past campaigns at the UCSF Awareness Site.

IT Security Awareness Flyer Posting Contest to Help Combat Duo Fatigue Attacks Continues! Win a $50 Amazon Gift Card!

Duo Fatigue Attacks are when attackers spam you with Duo push notifications, hoping you will eventually “fatigue” from the onslaught of requests and give in, granting access to your account and UCSF resources such as email.

Duo fatigue attacks are increasing and to help combat them, IT security has created a flyer with the actions needed to protect your credentials and the University. Please post them everywhere allowed such as breakrooms, department bulletin boards, or your refrigerator. Take a picture of the posted flyer and send it to [email protected]. Each picture is an entry in a drawing for a $50 Amazon gift card. May's winner was Jody Lewin, a Clinical Nurse at

UCSF Benioff Children’s Hospitals. Thanks, Jody!

Click here to view and print the flyer

Latest Phishing Campaign

Congratulations to the over 3500 people who reported the LinkedIn mock phish via Phish Alarm!

If you missed the "red flags" from our latest mock phish, they are displayed at the bottom of our page "Protect UCSF and Myself from Phishing and Other Similar Scams".

If an email seems at all strange, report it via Phish Alarm. You will find out almost instantly how to further interact with the email. Over-reporting is not an issue! Better safe than sorry! 

Required UC Cybersecurity Awareness Course

All UCSF Faculty, Staff, and Students must annually complete the UC Cyber Fundamentals Awareness Course on the UC Learning Management System (LMS). Five people win a $50 Amazon gift card each month! Find out more about the course and see the new contest below!

See the Latest Phishing Scams and Know

What To Do! 

In the last year, cyber criminals delivered a wave of cyber-attacks that were not just highly coordinated, but far more frequent and advanced than ever before seen. Many of them began with a phishing email. To help everyone be more aware of the current widespread and impactful phishing scams, IT Security has created a page New Phishing Threat Alerts. It lists the prevalent phishing campaigns and provide additional information on:

  • What to watch out for
  • Key actions to take
  • Tips to remember

 

Please bookmark the page and check back often. IT Security will be updating it frequently.

 

Ongoing Monthly Contests

 

Everyone Can Win a Prize!

1. Refer your UCSF friends and colleagues to the UCSF Awareness Site and ask them to:

  • Read the latest article and take the quiz.
  • Ask them to enter your email address as the referrer.
  • State they are new to the site on the last page of the monthly quiz.

For each 20 people you refer, you will win a $25 Amazon gift card (limit 2/year, referrals do not expire).

 

2. Each month we will be selecting one person to win a $50 gift card from everyone who uses the Phish Alarm Button to report suspicious emails. They will win a $50 gift card. This important security tool analyzes the email and lets you know if it is an actual phish. No need to contact the Service Desk or IT Security when you get something suspicious. For more information, please visit the Phish Alarm Overview Page.

 

3. Each month we will be randomly selecting five people from everyone with “current” status on their UC Cyber Fundamentals Awareness Course assignment to win a $50 Amazon Gift Card. Here’s how to check your status on the annual training requirement:

  • Click on the UC Learning Center link in MyAccess
  • Click on “UC Learning Center Login” from the UC Learning Center page
  • Click on “Required Training”
  • Check the Status of “eCourse: UC Cyber Security Awareness Fundamentals”

Winners Circle

May Awareness Quiz Winners

Karen Bell

Douglas Wampler

Leonard Telesca

Ty Breese

Adrienne Lovelund

Cynthia Lee (Office of Sponsored Research) 

 

May Phish Alarm Winner

Eleanor Fiege

 

May LMS Cybersecurity

Awareness Course Winners

Rogerstig Olson

Diana Bracamontes-Vargas

Brett Habermehl

Jonathan Amatruda

Hannah Basker

 

 

MayTop Quiz Referrers

Millo Pasquini

Eve Phong (Dinh)

Khin Nyunt

Cristina Morrison

Jennifer Camacho

Julie Erich

Matthew Lau

Thea Dela Cruz

Casey Nelson

John Hasper

Gato Gourly

Jason Dong

 

May Duo Fatigue Flyer Winner

Jody Lewin

Future Events

Tuesday, June 6 2023, 9:30 AM - 11:00 AM

UCUX Usability Workshop Summit 2023

UCB's Information Services & Technology and People & Culture departments and UCLA's IT Services

The University of California User Experience (UCUX) Usability Workshop Summit is an annual event held for members of the UC community from its respective locations. It focuses on user experience (UX) research and design, which help make digital services easier to use. The workshop is run by staff UX practitioners, known as the “UCUX community of practice.” During the workshop, information technology (IT) teams from across the UC present product reviews from a UX standpoint. The workshops raise the profile of UX in the UC system, increase the skill levels of IT staff, and, ultimately, improve the usability of digital products and services across the system. 

Click here for more information about the UCUX Usability Workshop Summit

Thursday, June 6 2023,11:00 AM - 12:00 PM

Planes, Trains, Automobiles...and Staying Safe Online

National Cybersecurity Alliance

This webinar will provide practical tips for maintaining your amazing cybersecurity habits even when you are away from home! Learn about public wi-fi, when to use your device’s location settings, and keeping your identity safe when traveling. It doesn’t matter if you’re headed across an ocean or down the street, this information will give you a better understanding of how to best protect yourself when you’re on the go.

Click here to register for Planes, Trains, Automobiles...and Staying Safe Online

Tuesday, June 20 2023, 2:00 PM - 3:30 PM

General Data Protection Regulation (GDPR) Primer

UC San Diego Privacy Office

The European Union's General Data Protection Regulation (GDPR) is a comprehensive and sweeping privacy law that applies to most entities that handle the personal data of individuals in the European Economic Area (EEA). Its scope is more expansive and its requirements different than most US privacy laws, such as FERPA or HIPAA. It impacts many campus activities, including collaborative research, recruiting, and fundraising. This session is recommended for those who have completed the Privacy 101 workshop and handle personal data of individuals within the European Union. ​

Click here to register for the General Data Protection Regulation (GDPR) Primer

 

Past Events

Tuesday, October 4 2022, 11:00AM-12:00 PM

Accessibility and Security Panel Discussion

Panel Members:

Scott Hollier, CEO & Co-founder Centre for Accessibility

Yue-Ting Siu, TVI PHD, Teacher of Students with Visual Impairments

Jiatyan Chen, Online Accessibility Program Manager, Stanford

Nicholas Borton, Chief Information Security Officer UCD

Lucy Greco, Web Accessibility Evangelist UCB

Diane Tyo, IT Operational Continuity Analyst UCLA

Moderator:

Cecile Puretz, Assistant Director of Disability Access & Inclusion at University of California San Francisco

Accessibility and Cybersecurity are both important considerations, particularly in inclusive yet cyber-vulnerable environments like those in the University of California system. Typically, conversations on these two topics are completely separate, but this event brought them together in a panel discussion to increase understanding and awareness of both sets of needs. With some effort and collaboration, it's possible to make technology both more accessible and more secure.

Click here to watch the Accessibility and Security Panel Discussion Webinar