Cybersecurity Awareness Resource Library

Last Updated: September 2014

The EDUCAUSE/Internet2 Higher Education Information Security Council is pleased to present this compilation of cybersecurity awareness resources for colleges and universities. We hope that you will find them useful in your efforts to raise awareness within your community. If you would like to contribute additional materials to this library, please contact us.

Getting Started

Raising the information security consciousness of our students, faculty, and staff is a difficult challenge that must be met in order to successfully achieve our information security goals. The resources in this section provide an overview of how to get started in establishing a security awareness program at your institution.

"Engage! Creating a Meaningful Security Awareness Program", presented by Cherry Delaney, Purdue University and Ben Woelk, RIT (2012) Download presentation
"Creating and Maintaining a Security Awareness Program", presented by Cherry Delaney, Purdue University (2008) Download presentation
National Cyber Security Awareness Month (NCSAM) Resource Kit and Sample Kit
Security Awareness Quick Start Guide and Security Awareness Detailed Instruction Manual
Community Based Security Awareness efforts
Get involved in the Stop.Think.Connect. awareness campaign.
Become a Champion of NCSAM. You'll also find free materials on NCSA's StaySafeOnline.org website!
Data Privacy Day occurs each year on January 28. Think about how you might use NCSAM resources to promote this international celebration on your campus, too.
EDUCAUSE Resource Center pages on Security Awareness and Executive Security Awareness

Higher Education Resources

The resources contained in this section are an effort to compile materials that have been created by colleges and universities for use at individual institutions. It is our hope that you will be able to adapt the materials for use at your institution or that the creativity behind these resources will inspire you to develop your own original materials.

If you would like to submit new resources, please send an e-mail to security-council@educause.edu.

Ads

University of Wisconsin Protect Your Identity/Anti-Phishing Campaign Ads (2008/2009)

Banners

NCSAM Banners created by NCSA
Auburn University Banners (2008, 2009, 2010, 2011, 2012)
University of Connecticut Husky Hunt Banner (2012)

Blogs

Books

Cornell University's Handbook Computer Security at Cornell: Secure Your Computer On and Off Campus (2009) Note: This handbook is available online and can be viewed by audience (faculty, staff, students, etc.). It can also be downloaded as a PDF file or printed as individual chapters. You can adapt this InDesign file for use on your campus, but please be sure to read more about the images used by Cornell.
EDUCAUSE's Book Computer and Network Security in Higher Education (2003)
HEISC "Recommended Reading" List (via Pinterest)
RIT's Cyber Self Defense Reading List (via GoodReads)

Bookmarks

Indiana University Protecting Data and Staying Safe Online Bookmarks (2009)
Missouri State University Information Security Bookmarks - Front and Back (2011) *Note: These were printed on 100% recycled paper. The goal was to have bookmarks available on a security table in the Student Union and to have the Bookstore insert one in books purchased during the month of October.

Brochures

University of Connecticut Husky Hunt Brochure (2012)
University of Northern Colorado P2P File Sharing Trifold (2009)

Business Cards

Purdue University "Security Alert" Cards (2012): These cards are left by the security team while someone is away from their computer, phone, or belongings. The card alerts the user that their behavior put them at risk for someone else to steal their computer or identity. Tips to protect your identity and data are also included.
University of California, Berkeley "Mobile Phone" Cards (2013): These cards should be printed on paper about the same size as a typical smart phone and handed out as a reminder about device safety and privacy.

Cartoons

Dartmouth Security Awareness Cartoons (created in collaboration with a local artist, Gabby Schultz at the Center for Cartoon Studies) Note: These cartoons can be printed as posters, sent as e-mails, posted on websites, and published in local newspapers.
- Cartoon #1: Sam Gets His Laptop Stolen
- Cartoon #2: Sam's Password Heartache
- Cartoon #3: Sam Walks the Copyright Plank
- Cartoon #4: Sam Beams Up a Virus
- Cartoon #5: Ho Ho, Oh No

Desktop Backgrounds

Auburn University Screensavers (2008, 2009, 2010, 2011, 2012)
Mississippi State University Desktop Wallpapers (2009)
The Ohio State University Robot and Bunny Desktop Background (2013)

E-mail Signatures

University of Florida Security Made Simple E-mail Signature (2010)

Facebook

Some campus IT or Information Security departments create their own Facebook page to share updates, provide tips, and connect with users. Here are a few examples. HEISC is also on Facebook.

Flyers

Cal Poly Pomona Cyber Security Fair Flyer (2013)
Colorado Technical University NCSAM Flyer (2013)
Northwestern University You're the Key Security Flyers (2008-2012)
University of San Diego Security Flyer (2010)
University of South Carolina Think Before You Connect Flyer (2012)

Games

Georgetown's Jeopardy Game (2011): This PowerPoint presentation includes the game questions used during an "Information Security Jeopardy!" game for faculty and staff. This game provided a chance to discuss the policies relevant to information security, as well as other security topics. You are welcome to reuse and customize the slides for your institution's faculty, staff and/or students.
Naval Postgraduate School CyberCIEGE Educational Video Game (2010): CyberCIEGE is a serious game designed to teach network security concepts. Its development was sponsored by the U.S. Navy, and it is used as an education and training tool by agencies of the U.S. government, universities, community colleges, and high schools (see CyberCIEGE Usage Map). The game is freely available to the U.S. Government and a no-cost license is available for educational institutions.

Lens Cloths

Pepperdine University printed anti-phishing information on lens cloths as student give-aways. They used one of the previous student poster contest winners for the design. (2013)

Phone Cases

University of Northern Colorado iPhone 4 Case (2011)

Pinterest

HEISC is starting to gather security awareness materials and other information security resources on Pinterest. We hope you'll follow us and let us know if we should be following your institution!

Podcasts

EDUCAUSE Podcasts, including 2012 interviews with HEISC co-chairs Larry Conrad (IT Security Then and Now) and Michele Norin (Security at the University of Arizona); Tom Zeller (Dramatic Changes in Higher Ed IT); Bret Ingerman (Effective Strategies for Data Security)
Mississippi State University Cyber Security Awareness Week Podcasts (2008-2009)
Northwestern University Information Security News Podcasts (2011-2012)
University System of Georgia Information Security and ePrivacy Podcasts (2009-2012)

Postcards

University of California Berkeley: Anti-Phishing Postcards (2013)
University of Northern Colorado P2P File Sharing Postcard (2009), Computer Security Postcard (2010), and Zombie-Mobile Device Postcard (2011)
University of Rochester Top Ten Tips Campaign Postcards (2014)

Posters

Information Security Awareness Poster Contest Winners (2009, 2011, & 2013) Note: Download Zip files with the 2009, 2011, or 2013 winning posters. You can also view the 2009, 2011, and 2013 poster contest winners on Facebook and Pinterest!
Auburn University NCSAM Posters (2008, 2009, 2010, 2011, 2012)
Canisius College Cyber Security Awareness Month Posters (2009) Note: Please contact us if you would like to request the original Scribus source files.
Indiana University Passphrase Posters and National Cyber Security Awareness Month Posters (2008)
RIT Information Security Awareness Posters (2013)
Sacramento State "Passwords Are History" Passphrase Campaign Posters (2012)
University of Calgary Security Awareness Posters (2008-2011)
University of California Berkeley: Anti-Phishing Posters (2013)
University of Florida Security Made Simple Posters (2010)
University of Georgia Security Awareness Posters (2012)
University of Rochester Social Networking Supervillains Campaign Posters & Digital Signage, Top Ten Tips Campaign Poster, Password & Antivirus Posters, and What to Share, What Not to Share "Valentine" Poster (2014)
University of San Diego Student Security Posters (2009)
University of Northern Colorado P2P File Sharing Poster (2009), Computer Security Poster (2010), and Zombie-Mobile Device Poster (2011)
University of Wisconsin Protect Your Identity/Anti-Phishing Campaign Posters (2008-2009)

Presentations

University of Cape Town: Create Better Passwords: Easy to Remember, Difficult to Hack (2014)
University of Hawaii: Making Them Listen! Designing a Security Presentation for a Non-Security Audience (2010)
University of Hawaii: SAMPLE Presentation - Protecting Yourself in Our Digital World (2010)

Projects

University of British Columbia Digital Tattoo Project: The goal of the Digital Tattoo project and its website is to share resources to encourage you to think about your presence online, navigate the issues involved in forming and re-forming your digital identity and learn about your rights and responsibilities as a digital citizen.

Quizzes

Brown University National Cyber Security Awareness Month Quiz (2008)
Duke University Information Lockdown Security Quiz (2012)
Tulane University HIPAA Privacy & Security; HITECH Training Quiz (2006)
University of Rochester Zombie Survival Game (2013)
West Virginia University Information Security Awareness Quizzes (2007)

RebelMouse

Stickers

University of California Berkeley Anti-Phishing Stickers (2013)
University of Rochester Security Awareness Mobile Screen Cleaner (2014)

T-Shirt Designs

University of Rochester Scare Fair Security T-Shirt Design: These Halloween-themed shirts are used as give-aways when students play security awareness related games during the annual Scare Fair. (2011)

Tumblr

Twitter

Some campus IT or Information Security departments create their own Twitter page to share updates, provide tips, and connect with users. Here are a few examples. Let @HEISCouncil know if we should follow your campus or add a link here!

Adelphi University (@adelphihelpdesk)
Baylor University (@BearAware)
Carnegie Mellon University (@MySecureCyber)
Clemson University (@clemsonoisp)
Indiana University (@ProtectIU)
Ithaca College (@IC_INFOSEC)
Missouri State University (@ISOMoState)
MOREnet (@MOREnetSecurity)
Northwestern University (@NU_NUIT)
RIT (@RIT_InfoSec)
Rutgers University (@ru_secure)
Stony Brook University (@SBUDoIT)
University of Connecticut (@UConnISO)
University of Idaho (@UIITSecurity)
University of Illinois (@citessecurity)
University of Kansas (@beseKUre)
University of Massachusetts Lowell (@UML_IT_Security)
University of Missouri - St. Louis (@UMSL_InfoSec)
University of Notre Dame (@oitinfosec)
University of San Francisco (@USFInfoSec)
University of South Carolina (@UofSCtech)
University of Virginia (@UVaISPRO)
University System of Georgia (@USGINFOSEC)
VA Tech (@VT_IT_Security)

Videos

Information Security Awareness Video Contest Winners (2013, 2011, 2009, 2007, & 2006) Note: Download the 2013 videos via ShareFile or view them on the Security Video Contest YouTube Channel and Facebook page.
President Obama's Video: "Protecting Yourself Online" (2009)
NCSA Video: "Don't Be a Billy" (2009)
NCSA Video: "When You Least Expect It" (2007)
Kansas State University IT Services Cyber Security Awareness Video (2011)
Naval Postgraduate School CyberCIEGE Movies (2010) Note: These tutorial movies illustrate information assurance concepts explored by the CyberCIEGE game.
Rutgers University RUSecure Videos: "Life as a Computer 1", "Safepardy", and "Secure vs Insecure"
Texas A&M University Videos: 5 episodes in the "Don't be a Victim" series (2010) Note: These and other videos are available on the TAMUIT YouTube Channel.
University at Buffalo Personal Computing Security Video: "Caught in the Act"
University of New Hampshire Videos: "Don't Be a Phish" and "P2P Is Risky"
University of Rochester Information Security YouTube Playlist
University of San Diego Security Videos and Tutorials (2010)
University of South Carolina: Malware Executive Level and Technical Briefings and other Security Videos (covering several topics such as: finding sensitive data, social networking, wireless attacks)
University of Texas Health Science Center Anti-Phishing Video: "Could This Happen to You?"
Utah State University Video: "5 Things to Know About Passwords"
UVA Responsible Computing Video: "When I go to UVa..."
University of Wisconsin Anti-Phishing Video: "Protect Your Personal Information"

Web Graphics

Auburn University Web Graphics (2008, 2009, 2010, 2011, 2012)
University of Florida Security Made Simple Web Graphics (2010)

Government Resources

The government - federal, state, and local - is also a source of cybersecurity awareness resources. Below is a sample of some resources developed for government audiences that you may want to consult as you develop programs for your campus.

Industry Resources

In addition to resources developed by institutions of higher education, the providers of IT products and services increasingly offer security awareness to end-users. Below is a sample of some of the cybersecurity awareness resources available from industry.

Questions or comments? Contact us.

Except where otherwise noted, this work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License (CC BY-NC-SA 4.0).

Page tree