Information Security
Information is an important asset that needs to be protected from unauthorized modification, destruction, or disclosure. Our university prides itself on the free exchange of knowledge and ideas, which means some information created or maintained by at ESU can and should be shared with the public. To these ends, the following policies have been developed and put into place. Please send your information security questions via e-mail to iso@emporia.edu.Link here to view University Security Policies.
Why is Information Security needed at ESU?
Regulations, laws, privacy rights and a sense of due diligence all play important roles in information policy development. Information security covers physical security (locking information and servers away), awareness of risks and threats, and electronic security such as anti-virus programs and encryption of files.
Incident Reporting Procedures
An Information Security (IS) Incident is something that has happened to compromise the information of students, faculty, and/or staff, as well as ESU business information. An IS incident could be:
- Your ESU owned computer or laptop is missing
- Your ESU network account is being used when you are not using it
- Someone else's UserID is showing on your logon screen
- You notice unsafe information protection practices.
When IS incidents happen, serious threats and consequences can occur. ESU faculty and staff are responsible for reporting suspected or known security incidents, including any observed or suspected security weaknesses in ESU systems or services. (Read the IS Incident Reporting procedures.) You may also access this information at techsite.emporia.edu; look in the Employee section under Information Security Procedures.
National Cyber Security Awareness Month
October is Cyber Security Awareness Month. This is a good time to make sure you have up-to-date Antivirus software, scan for Spyware, make sure you have latest software patches installed on your system, and to clean up old files and old e-mail.
Watch out for those HOAX e-mails! Hoax e-mails are e-mails sent to tempt you into sending your usernames, passwords, personal information or to attempt to get you to reply to verify your account is valid. Hoax e-mails cover things like asking you to verify your account settings, verify your identity, send money to unknown/unauthorized entities, warn you about fake viruses, send fake photos or just about anything else. There are several valid entities which research and report on hoax e-mail. TCS WILL NOT ask you to verify your account by replying with your username, password or personal information. When you receive an e-mail asking you to verify your account, whether it’s a web user account, an e-mail account, or a network access account; do NOT reply. If you need to verify the e-mail was sent by TCS, contact the TCS HelpDesk by calling extension 5555 on campus, off-campus at 341.5555, or toll free at 877.341.5555.
Remember: Keep your information safe. Do not respond to email’s asking for your information or password!
Go to our Security Tips Archive to learn more.