Stay Cyber-Smart During IT Security Awareness Month
October is IT Security Awareness Month, a good time to brush up on simple steps we can all take to help protect UMW accounts, information and systems from cyber threats.
Take a Second Look at Phishing Emails: Phishing emails are becoming harder to spot and are often aimed directly at work inboxes, mimicking messages from HR, payroll or even a colleague’s account. Before clicking a link or opening an attachment, take a moment to look for warning signs, including urgent requests for login credentials, unexpected attachments and sender addresses that are almost — but not quite — correct. If a message seems suspicious, don’t click or reply. Use the “Report Phishing” button in your inbox or forward the message to abuse@umw.edu. Reporting takes only seconds and helps IT Security block the same message from reaching others across UMW.
Strengthen Your Passwords: Reusing passwords across work accounts or choosing passwords that are easy to guess can put UMW accounts and systems at risk. Use a unique passphrase for every work account, especially email and VPN logins. A passphrase made up of four or more random words can be stronger than a short, complex password — and easier to remember. Keep passwords secure and never share them, even with a trusted colleague.
Add Another Layer of Protection with Multi-Factor Authentication: Even a strong password can be stolen. Multi-factor authentication (MFA) adds a second layer of security, helping protect your account even if your password is compromised. MFA blocks the vast majority of automated account takeover attempts and takes only seconds to approve. But remember: Never approve an MFA request you didn’t initiate. An unexpected prompt could mean someone is trying to access your account. Deny the request and change your password.
To help keep your UMW account secure:
— Review the instructions for MFA on your UMW account.
— Set up a backup authentication method, such as a second device, in case you lose access to your primary one.
— Never approve an MFA request you didn’t initiate; deny it and change your password.
— Contact the UMW Help Desk if you need assistance setting up MFA.
Leave a Reply