Information SecurityGeneral Awareness Training

Module 1 – Introduction

For The UF HSC Workforce

Module 1 - Introduction 2

General Awareness: Information Security

Prevent Risks

Protect Information

Threats

Module 1 - Introduction 3

Principles of Information Security

Module 1 - Introduction 4

What Are We Trying to Prevent?• Violation of privacy

• Identity theft

• Loss of competitive advantage

• Loss of computer and network resources

• Copyright violations and other illegal uses

Module 1 - Introduction 5

What Must Be Protected?

Servers and Networks

Offices and Buildings

Information

Desktop andPortable Computers

Module 1 - Introduction 6

Protected From What Threats?

Computer Accident orHardware Failure

Computer Hackers

WeatherMalware -Virus, Worm, Spyware

Laptop, PDA ThievesPhishing Scams

Module 1 - Introduction 7

What Is Important?

Module 1 - Introduction 8

Individually identifiable health

information; health information

combined with name, or med

record #, or address, or key

dates, or family members, or any

other information that would link a

person to their health condition.

What Kind of Information ?

Protected Health Information (PHI)

Module 1 - Introduction 9

Individually identifiable student

information; name or UF ID or SSN or

photo, in combination with grades,

demographics, admissions,

schedules, class rosters, financial, or

any information needed and used by

our faculty and staff about our

students, with the exception of a

limited amount of directory

information.

Student Records

What Kind of Information ?

Module 1 - Introduction 10

What Kind of Information ?Names combined with SSNs, or

drivers license numbers or Florida

Ids, or any Financial account

numbers and access codes, or

any other information that could

be used to commit fraud using

someone else’s identity.Personal Identification Information (of anyone including faculty, staff, vendors

and clients)

Module 1 - Introduction 11

Student Records

Protected By Laws

HIPAA

FERPA

Florida Statutes, Chapter 817.5688 (aka House Bill 481)

Protected Health Information (PHI)

Personal Identification Information (of anyone including faculty, staff, vendors and clients)

Module 1 - Introduction 12

Personal Identification Information (of anyone including faculty, staff, vendors and clients)

Student Records

MUST Be Safeguarded WhereverIt is Used or Stored

HIPAA

FERPA

Florida Statutes, Chapter 817.5688 (aka House Bill 481)

Protected Health Information (PHI)

Module 1 - Introduction 13

Research

Academic

Business

Other Important to UF HSC Needs To Be Safeguarded Too

Module 1 - Introduction 14

Summary

Servers and Networks

Thumb Drives

Computer HackersAnd Thieves

Natural Disasters Different Types of Information

Confidentiality, Integrity,Availability

info

Module 1 - Introduction 15

Your Responsibilities

Protect Information and our Computing Environment

Learn and Practice SafeguardsReview General Awareness

Training Regularly