October 2012 marks the ninth annual National Cyber Security Awareness Month sponsored by the Department of Homeland Security. To celebrate, we were hoping you would consider having a little fun with Security Awareness by playing a game of “20 Questions.” Let’s test your "security" knowledge.
Below you will find 20 questions pertaining to the new SHSU Information Security User Guide. You can find the answers on the IT@Sam policies website.
- What are Information Resources?
- Why do we have an Information Security Program? (3 reasons).
- If your supervisor asks you for your password, you should give it to them immediately.
- If an action is technically possible, this means it is okay for you to perform that action.
- It's ok to share your password with another SHSU employee as long as they are a relative.
- With the proper documentation and approvals, exemptions to policy can be granted.
- It's against policy to use information technology resources for political gain.
- Security Awareness Training is optional.
- Any data stored on your local drive (desktop or laptop) is not backed up by IT.
- There is no need to encrypt or password protect a thumb drive if you have it safely tucked away in your purse.
- You are held accountable for all network and Internet activity that is associated with your login ID, whether you personally did it or not.
- As a convenience to the SHSU User Community, personal use of Information Resources is allowed if certain guidelines are followed. Which of the following are guidelines from the policy? Choose 3:
- Personal use must not result in direct costs to the SHSU
- Personal use must be restricted to breaks and lunch hour.
- Personal use must not interfere with the normal performance of an employee’s work duties.
- Downloads must be restricted to one per 24 hour period to conserve bandwidth.
- No files or documents may be sent or received that may cause legal action against SHSU.
- What should I do if I find and download software that would help me in my job and it is free:
- Go ahead and load it on your PC/laptop since it doesn’t cost SHSU anything.
- Research on the Internet whether it will work on your PC/laptop, and if all is ok, load it.
- Call the vendor to determine whether it is compatible with your software/operating system.
- Call the Service Desk since all software must be approved and installed by IT@Sam.
- Which of the following is NOT a portable computing device.
- Thumb Drive
- External Hard Drive
FILL IN THE BLANK:
- If, on your desktop, a virus is not automatically cleared by the virus protection, you must call the Service Desk immediately because this is a “___________ incident”.
- All messages, files and documents located on Agency information resources are owned by SHSU, and may be subject to ____________ ____________ Requests.
- If you need to save a file that has sensitive or confidential information onto a thumb drive, the drive must be ___________ to ensure the data is protected.
- Every employee has to sign the ____________ _________________ acknowledging they have read and understand SHSU requirements regarding computer security policies.
MORE SHORT ANSWERS:
- What can happen if you violate the Information Resource program?
- If you have a question or think you know of a security incident, and you're not sure who to talk to about it, who do you call?
For a more in depth description of National Cyber Security Awareness Month, please visit the National Cyber Security Alliance site.