You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 155 Next »

Last reviewed: November 2016

October is National Cyber Security Awareness Month! Some quick links to get you started...

  1. First, take a few minutes to complete this 8-question NCSAM Planning Guide worksheet (PDF or Word) to help you think about what resources and materials may be required.
  2. Visit our toolkits to find sample materials and free, adaptable resources: NCSAM Sample Kit, Cybersecurity Awareness Resource Library, Security Awareness Quick Start Guide, and Security Awareness Detailed Instruction Manual.
  3. Find a guest speaker using our Speakers Bureau.
  4. Download free materials at StaySafeOnline.org or Stop.Think.Connect.
  5. Keep reading to learn more about security awareness, why security awareness is important, critical success factors for awareness activities, National Cyber Security Awareness Month, how we plan for NCSAM, and additional resources (including links to state, regional, and international efforts).
  6. Make plans for a year-round security awareness and education campaign by using our annual Campus Security Awareness Campaign framework, whether you promote topics monthly or quarterly. (2017 topics & guest blogs available soon!)

173 institutions signed up as NCSAM Champions in 2016 and more than 200 institutions shared their plans for events, activities, or training sessions during the month of October. EDUCAUSE, Internet2, and the REN-ISAC also signed up as champions in supper tot the higher education community.

2016 Campus Events & NCSAM Champions

  • Adelphi University
  • American Public University System
  • American University
  • Athens State University
  • A.T. Still University
  • Auburn University
  • Austin Peay State University 
  • Ball State University
  • Barnet and Southgate College
  • Barry University
  • Bates College
  • Baylor University
  • Bellevue University
  • Berry College
  • Binghamton University
  • Black Hills State University
  • Boise State University
  • Boston College
  • Brock University
  • Brown University
  • Bryn Mawr College
  • Bucknell University
  • Burman University
  • Cal Poly Pomona University
  • Calhoun Community College
  • Carleton and St. Olaf Colleges 
  • Carleton University
  • Carnegie Mellon University (including CMU's CyLab and Information Networking Institute)
  • Central Washington University
  • Clark University
  • Clayton State University
  • College of Charleston
  • Colorado Community College System
  • Columbia Basin College
  • Columbia College
  • Columbia University Medical Center
  • Columbus State Community College
  • Columbus State University
  • Connecticut College
  • Cornell University
  • County College of Morris
  • Dallas County Community College District (DCCD)
  • Davidson College
  • Delta College
  • Drew University
  • Duquesne University
  • Eastern New Mexico University-Ruidoso
  • Elon University
  • Emerson College
  • Emporia State University
  • Florida Atlantic University
  • Florida State University
  • Forsyth Technical Community College
  • Frostburg State University
  • The George Washington University
  • Hamilton College
  • Harper College
  • Houston Community College
  • Hunter College
  • Ignatius Park College
  • Indiana Tech
  • Indiana University of Pennsylvania
  • Ivy Tech Community College
  • Jackson College
  • Johns Hopkins Bloomberg School of Public Health
  • Kennesaw State University
  • K.J. Somaiya College of Arts, Commerce, and Science
  • Lansing Community College
  • Lee College
  • Lehigh University
  • Liberty University
  • Lone Star College
  • Longwood University
  • Maricopa Community Colleges
  • Marist College
  • Marquette University
  • Marshall University
  • Millersville University
  • Montgomery County Community College
  • Mount Royal University
  • North Carolina State University
  • North Central College
  • North Idaho College
  • Northeast Alabama Community College
  • Northeastern University
  • Northern Arizona University
  • Northern Virginia Community College
  • Northwest Florida State College
  • Norwich University
  • Nova Southeastern University
  • Old Dominion University
  • Parkland College
  • Pepperdine University
  • Pinellas Technical College
  • Prairie View A&M University
  • Queens University of Charlotte
  • Quinnipiac University
  • Radford University
  • Robert Morris University
  • Rochester Institute of Technology
  • Roosevelt University
  • Rose-Hulman Institute of Technology
  • Saint Joseph's University
  • Saint Louis University
  • Salisbury University
  • Salve Regina University
  • SANS Institute
  • Saskatchewan Polytechnic
  • Scripps Research Institute
  • Smith College
  • Southcentral Kentucky Community & Technical College
  • Southern New Hampshire University (SNHU)
  • Spokane Falls Community College
  • Stony Brook University
  • SUNY College of Optometry
  • SUNY Sullivan
  • Swarthmore College
  • Temple University
  • Tennessee College of Applied Technology, Shelbyville
  • Terra State Community College
  • Texas A&M University 
  • Thomas College
  • Tidewater Community College
  • Towson University
  • UCLA
  • University of Antelope Valley
  • University of Arizona
  • University of Benin
  • University at Buffalo
  • University of California, Davis
  • University of California, Office of the President
  • University of California, Santa Barbara
  • University of California, Santa Cruz
  • University of Central Florida
  • University of Chicago
  • University of Exeter
  • University of Findlay
  • University of Illinois at Chicago
  • University of Illinois at Springfield
  • University of Illinois at Urbana-Champaign
  • University of Kentucky
  • University of Maryland Baltimore 
  • University of Memphis 
  • University of Nebraska at Kearney
  • University of North Carolina at Chapel Hill
  • University of North Carolina Pembroke
  • University of North Carolina School of the Arts
  • University of North Carolina, Wilmington
  • University of North Florida
  • University of North Georgia
  • University of Northern Colorado
  • University of Phoenix
  • University of Pittsburgh
  • University of San Diego
  • University of South Carolina
  • University of Tennessee Health Science Center
  • University of Texas at Austin
  • University of Texas Health Science Center at San Antonio
  • University of Texas Rio Grande Valley
  • University of Toledo
  • University of Toronto
  • University of Virginia
  • University of Wisconsin-Madison
  • University of Wisconsin-Stout
  • Utica College
  • Valparaiso University
  • Villanova University
  • Vincennes University
  • Virginia Tech
  • Walsh College
  • Washington State University
  • Wayne County Community College District
  • Wellesley College
  • Westchester Community College
  • West Chester University of PA
  • Western Illinois University
  • Widener University
  • Williams College
  • Xavier University
  • Xavier University of Louisiana 

What is Cyber Security Awareness?

The Oxford English Dictionary defines awareness as "The quality or state of being aware; consciousness." Aware is defined as "Informed; cognizant; conscious; sensible."

The purpose of cyber security awareness presentations is simply to focus attention on cyber security. Awareness presentations are intended to allow individuals to recognize information technology security concerns and respond accordingly.

  • The learner is the recipient of information
  • The information reaches broad audiences
  • Attractive packaging techniques are used

We can characterize a user's cyber security awareness level by describing it as the actions a user takes in a given security situation. Do they know about any policies governing that activity? Do they follow the policy? What happens when they are confronted by a new situation that is not addressed by the policy?

Why is Cyber Security Awareness Important?

To protect the confidentiality, integrity, and availability of information in today's highly networked systems environment requires that all individuals:

  • Understand their roles and responsibilities related to the organizational mission
  • Understand the organization's information technology security policy, procedures, and practices
  • Have at least adequate knowledge of the various management, operational, and technical controls required and available to protect the IT resources for which they are responsible

Cyber security awareness programs impress upon users the importance of cyber security and the adverse consequences of its failure. Awareness may reinforce knowledge already gained, but its goal is to produce security behaviors that are automatic. The goal is to make "thinking security" a natural reflex for everyone in the organization. Awareness activities can build in these reflexes both for the security professional and for the everyday user.

Critical Success Factors for Awareness Activities

  • They are based on the organization's policies
  • They have senior management support
  • The focus is on people at all levels of the organization
  • They are effectively planned:
    • Based on user's needs, roles, and interests
    • Identifies security problems in the organization that need addressing
  • They use appealing materials and methods

Awareness programs usually use repetition to reinforce desired behaviors and attitudes about security.

What is National Cyber Security Awareness Month?

National Cyber Security Awareness Month is an annual effort to increase awareness and prevention of online security problems, spearheaded by the U.S. Department of Homeland Security and the National Cyber Security Alliance (NCSA). The Higher Education Information Security Council (HEISC) promotes and participates in the annual campaign each October, joining forces with a range of organizations from the public and private sector to expand cybersecurity awareness on campuses across the country. The Higher Education Information Security Council is offering a range of programs and resources:

How Do We Plan for National Cyber Security Awareness Month?

The following NCSAM Planning Guide worksheet (PDF or Word) will help you to think about how your institution might go about implementing a plan to take advantage of National Cyber Security Awareness Month. You can also use the Annual Campus Security Awareness Campaign, which includes a printable 2016 calendar with monthly security awareness topics and 12 blog posts on the monthly topics with ready-made content for your campus communication channels. 

Indiana University offers a NCSAM Sample Kit with creative materials based on a 1950's horror theme, and outlines plans for their use that you can adapt to your institution's needs quickly. With a bit of a printing budget (or your own high quality printer) and some coordination, you can pick and choose which materials will best help you to increase your community's security awareness. Some of the materials are even provided in Spanish! These materials were created and used at Indiana University for National Cyber Security Awareness Month 2005. Indiana University grants permission for non-profit educational use, as long as the credit line and the copyright statement remain on the materials.

Cal Poly Pomona's 2007 presentation describes the development of their Cyber Security Fair in great detail. Tips for starting your own cyber security fair are offered on such topics as determining the target audience, structuring the event, developing a support network, selecting presentation topics & speakers, as well as the associated costs.

The winning posters and videos from previous Information Security Awareness Video & Poster Contests are available for use in campus security awareness campaigns during student orientation, National Cyber Security Awareness Month, Data Privacy Day, and throughout the year. (info) Note: Videos are also available to view on the HEISC YouTube Channel. Posters can be found on the HEISC Facebook page or Pinterest page.

If your group or institution would be interested in a presentation from an information security or privacy expert, please see our Speakers Bureau. You could also use your LinkedIn connections to invite a local, regional, or national speaker to a campus event.

Note: Data Privacy Day occurs each year on January 28. Think about how you might use NCSAM resources to promote this international celebration on your campus, too.

Resources

State and Regional Efforts

International Efforts

(question) Questions or comments? (info) Contact us.

(warning) Except where otherwise noted, this work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License (CC BY-NC-SA 4.0).

  • No labels