Re: Do you require students take security awareness training

[Hendra Hendrawan <hendra () YORKU CA>]

Hi, 

We deployed our security awareness training to students. The students were 
not required to take it but there were incentives. 
We licensed the material through an external vendor and leveraged our 
enterprise learning system as well. 
Feel free to contact me offline for more details. 

Regards, 

Hendra Hendrawan ? Senior Security Analyst 
Information Security
University Information Technology (UIT)

YORK UNIVERSITY 
040 Steacie Building ? 4700 Keele Street 
Toronto ON ? Canada M3J 1P3
T 416.736.2100 ext 22317 F 416.736.5830
hendra () yorku ca ? www.yorku.ca 

York UIT will NEVER send unsolicited requests for passwords or other 
personal information via email. Messages requesting such information are 
fraudulent and should be deleted. 

The EDUCAUSE Security Constituent Group Listserv 
<SECURITY () LISTSERV EDUCAUSE EDU> wrote on 02/03/2014 10:25:56 AM:

> From: Roger A Safian <r-safian () NORTHWESTERN EDU>
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Date: 02/03/2014 10:26 AM
> Subject: Re: [SECURITY] Do you require students take security 
> awareness training
> Sent by: The EDUCAUSE Security Constituent Group Listserv 
> <SECURITY () LISTSERV EDUCAUSE EDU>
>
> We don?t have anything required for students.  Frankly, if such a 
> beast were available, it would be better directed towards staff/
> faculty/retirees/etc.  Students are, for the most part, not part of 
> the problem.
>
> BTW ? I assume this is for non-HIPAA required training?
>
> From: The EDUCAUSE Security Constituent Group Listserv 
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Cathy Hubbs
> Sent: Friday, January 31, 2014 1:50 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Do you require students take security awareness 
training
> Good morning all,
> We made good progress at the end of 2013 by getting annual security 
> awareness training required for all staff (cheers!). It is delivered
> with our enterprise learning management system so we can report on 
> completion by individual and departments. Many of you have had this 
> in place for some time. Thank you for leading the way. 
>
> Now I'm interested in tackling the student side, specifically 
> requiring training, upon account set up. 
>
> Will you contact me on or off thread to let me know if you have 
> instituted "required" security awareness training for all students. 
> Please indicate whether it is a home grown solution or commercial. 
>
> I'm building my case and would like to point to the many successful 
> programs that I believe are in place. 
>
> Thank you in advance,
>
> Cathy 
>
> Cathy Hubbs
> Chief Information Security Officer
> Office of Information Technology 
> American University
> 202.885.3998