Security Awareness

The following information is critical to the security of everyone especially University data and personal security.

Much of the information on this page comes from CUNY Central's security page where there is additional and current data on the importance of being security-aware when dealing with computing in general.

CUNY's Cybersecurity Resources

CUNY’s Cybersecurity Resources:

<> How to Protect Yourself Against Secret Shopper, Personal Assistant, and Other Online Scams!<> CUNY Issued Security Advisories<> CUNY Information Security Guidelines for Working Remotely<> CUNY’s Zoom Security Protocol<> CUNY’s Online Security Awareness Course that is catered to CUNY students, faculty, and staff.<> CUNY’s Security Policies & Procedures

Other Awareness Resources

CISA-backed nonprofit announces 'National Cybersecurity Education Month' https://cyber.org Below for k-12 but good awareness info on things for staff with kids in schools https://www.congress.gov/bill/117th-congress/house-resolution/1154/text?r=2&s=1

FWIW, NYC DOE vendor breach example

http://www.nysed.gov/data-privacy-security/illuminate-education-breach-notice

Back to York Security Awareness page

Security Awareness Training

Security awareness training is recommended for all computer users at CUNY. This comprehensive online course will benefit your understanding of protecting non-public university data as well as personal data for computers and wireless devices. Please click on the link provided below in order to take this 30 minute course. All new employees must take this once employment begins.

Security Awareness Training

Information on CUNY Security

Advisory on types of scams

The following are reminders of the types of scams to stay vigilant while online:

Secret-Mystery Shopper / Personal Assistant Scams

Printable PDF version of the advisory:

Secret-Mystery Shopper/Personal assistant Scams PDF version

For more information on Cyber Security awareness visit the The CUNY Information Security.

If you believe you have been scammed or received an email that looks suspicious or is receiving phone calls attempting to get information from sources you do not know, contact the York College IT immediately at 718-262-5300

All About Encryption

Security Advisories

90 Day CUNY Central Password Policy Support

Cyber Dos and Don'ts

Helpful Tips on Security Awareness

Non-Public University Data Security

Passwords

Ransomware Notice

What Do I Need To Know?

Cybertheft and Security Breaches

Using Caution with Email Attachments & Links

IT Procedures for theft or missing technology

York issued technology follows strict protocols in compliance with best practices for appropriate property management as set forth by the University. The Central office via audits tracks assets for maintaining compliance with city and state financial regulations. If a York issued asset is missing or believed to have been stolen there is a protocol for reporting that needs to be followed in order for the asset in question to be properly deposed and reported to the Central Office inventory system. When an asset is missing or stolen you must immediately notify your supervisor and IT department via an email. A form will be sent to you in order for you to provide details. This form will be sent along with the information in your email to Public Safety and the Property attendant at York. Your form will be attached to an incident which will be opened in the IT tracking system. You will receive a copy of the report which can than be used to justify replaced if needed. Any replacement cost that may be incurred is purely the decision of the Business Office following their own policies on these types of events. The form is available on this site for use as needed. This form can also be used for IT equipment that has sustained damage.