Re: re-usable passphrase education resources

[Chad Tracy <chad.tracy () COLBY EDU>]

Casey,

If you have not yet ventured down the rabbit hole of gaining "buy-in", I
would recommend using available energy to, instead, ask for a full
two-factor authentication roll-out... that's of course if you have not done
so already. Passwords, regardless of length can still get lifted by
credential harvesting phishing emails. I may be on an island by myself, but
I really feel that passwords are dead and we really need two-factor to
*help* stop the bleeding of PII being siphoned from our institutions.



Chad Tracy
Director of Information Security
Colby College
Waterville, ME 04901
207 . 859 . 4199
chad.tracy () colby edu

On Tue, Sep 19, 2017 at 2:15 PM, Valerie Vogel <vvogel () educause edu> wrote:

> Hi Casey,
>
>
>
> You may find some posters and other materials in our Cybersecurity
> Awareness Resource Library in the Information Security Guide. Most of the
> materials shared in the guide can be adapted for your institution:
> https://spaces.internet2.edu/display/2014infosecurityguide/
> Cybersecurity+Awareness+Resource+Library
>
>
>
> We also have two guest blogs that provide suggested content and resources
> related to strong passwords and passphrases. (These are part of our annual
> campus security awareness campaign. A new blog that’s part of the 2018
> campaign will be available next week, as well…stay tuned!)
>
> ·         Step Up to Stronger Passwords by Sandy Silk (Harvard):
> http://er.educause.edu/blogs/2016/11/may-2017-step-up-to-
> stronger-passwords
>
> ·         Will Your Password Be Unbroken? by Ben Woelk (RIT):
> http://er.educause.edu/blogs/2016/5/september-will-your-
> password-be-unbroken
>
> ·         More awareness campaign resources: https://www.educause.edu/
> focus-areas-and-initiatives/policy-and-security/cybersecurity-program/
> awareness-campaigns
>
>
>
> We also maintain a Pinterest board for Security Awareness and this
> includes posters and videos created by college students:
>
> https://www.pinterest.com/heiscouncil/security-awareness/
>
>
>
> Finally, the National Cyber Security Alliance has a library with free
> resources (fact sheets, infographics, logos/images, etc.):
> https://staysafeonline.org/resources/
>
>
>
> I hope this helps!
>
>
>
> Thank you,
>
> Valerie
>
>
>
> *Valerie Vogel *
>
> Senior Manager, Cybersecurity Program
>
> *EDUCAUSE*
> *Uncommon Thinking for the Common Good*
>
> direct: 202.331.5374 <(202)%20331-5374> | twitter: @HEISCouncil |
> vvogel () educause edu
>
>
>
> *From: *Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU>
> on behalf of Casey Feskens <cfeskens () WILLAMETTE EDU>
> *Reply-To: *Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU
> >
> *Date: *Tuesday, September 19, 2017 at 9:57 AM
> *To: *Security Discussion Group List <SECURITY () LISTSERV EDUCAUSE EDU>
> *Subject: *[SECURITY] re-usable passphrase education resources
>
>
>
> We are about to roll out a requirement for longer passphrases for our
> campus and I am looking for resources particularly for educating students
> such as posters, without reinventing the wheel. I recall seeing a
> university or two making some resources available on one of my listservs
> relatively recently but I've been unsuccessful finding anything in the
> archives. Does this ring any bells for anyone, or can anyone point me in
> the direction of materials available for re-use?
>
>
>
> Best,
>
>
>
> Casey
>
>
>
> --
>
> ---------------------------------------------
> Casey Feskens <cfeskens () willamette edu>
> Director of Infrastructure Services
> Willamette Integrated Technology Services
> Willamette University, Salem, OR
> Phone:  (503) 370-6950
> ---------------------------------------------