events.educause.edu · web viewdo you have an analytics on how many people have used it that you...

Project Completed by:

EDUCAUSE Live!Campus-Wide Two-Factor Authentication Saturation Campaign

October 11, 20181:00PM – 2:00PM Eastern

https://events.educause.edu/educause-live/webinars/2018/campus-wide-two-factor-authentication-2fa-saturation-campaign

EDUCAUSE Live!October 11, 2018

Page 1

EDUCAUSE Live!Campus-Wide Two-Factor Authentication Saturation Campaign

October 11, 2018

>> WELCOME TO EDUCAUSE LIVE! EVERYONE. THIS IS VALERIE VOGEL, SENIOR MANAGER FOR THE EDUCAUSE CYBERSECURITY PROGRAM, AND I’LL BE YOUR MODERATOR FOR TODAY’S E-LIVE WEBINAR. WE'D LIKE TO THANK MINDTREE FOR THEIR SPONSORSHIP OF THE 2018 EDUCAUSE LIVE! WEBINARS. MINDTREE HELPS EDUCATION INSTITUTIONS ENGAGE CONSTITUENTS WITH RICHER EXPERIENCES, EMPOWER EDUCATORS, AND OPTIMIZE OPERATIONS. YOU ARE PROBABLY FAMILIAR WITH YOUR INTERFACE FOR YOU ARE WEBINAR BUT WE HOPE YOU'LL JOIN US IN MAKING THE SESSION INTERACTIVE. USE THE CHAT BOX ON THE LEFT TO SUBMIT QUESTIONS AND SHARE RESOURCES /SKP-B E-D-U-L-I-V-E. IF YOU HAVE AUDIO ISSUES CLICK ON THE LINK IN THE LOWER LEFT-HAND CORONERER AND AT ANY TIME YOU CAN DIRECT A PRIVATE MESSAGE TO TECHNICAL HELP AND A DROP-DOWN MENU WILL APPEAR WHERE /EBGT SELECT CHAT WITH AND HOST. AS MANY OF YOU KNOW OCTOBER OF NATIONAL CYBERSECURITY AWARENESS MONTH. EDUCAUSE IS PARTNERING FOR THE 15TH YEAR IN A ROW TO HELP PROMOTE. I'M PLEASED TO SHARE THAT UNIVERSITIES HAVE CAUSED EDUCAUSE AT CHAMPIONS SO FAR THIS YEAR. IT'S NOT TOO LATE TO SIGNUP WITH NCS A AND SHOW YOUR INSTITUTIONS SUPPORT. OUR WEBINAR TODAY TWO STEP AUTHENTICATION CYBERSECURITY SATURATION CAMPAIGN THIRTY-FOUR THOUSAND STUDENTS. THIS SESSION WILL DETAIL YOU TO USE MULTI FACETTED CAMPAIGN, IT DEPARTMENT AND STUDENT GROUPS AND DISCUSS BARRIER ANDs EXPLORE THE EFFECTIVENESS OF UVUS SATURATION CAMPAIGNS. ROBERT ASSISTANT PROFESSOR AT UTAH VALLEY UNIVERSITY. AWARENESS IN THE DEPARTMENT OF HOMELAND SECURITY AND COMMUNICATIONS. WE APPRECIATE BOTH OF YOU BEING HERE TO HELP US KICK OFF EDUCAUSE LIVE! FOR NATIONAL OH CYBERSECURITY AWARENESS MONTH.

>> I'M JUST GOING TO A SAY A FEW WORDS AND I'M WITH THE UNITED STATES DEPARTMENT OF HOMELAND SECURITY AND WE'RE PLEASED TO BE THE GRANT TEE TO THE NATIONAL CYBERSECURITY ALLIANCE AND TO BE ABLE TO SAY THAT WE'RE TAKING PART IN THIS TWO FACTOR AUTHENTICATION CYBERSECURITY SATURATION CAMPAIGN AND I'LL TELL YOU HOW WE FIT INTO THE OVERALL CYBERSECURITY AWARENESS PICTURE. OUR BRANCH WITHIN THE DEPARTMENT OF HOMELAND SECURITY LEADS EFFORTS TO SUPPORT THE PROTECTION AGAINST AND RESPONSE TO CYBER THREATS AND HAZARDS. AS YOU CAN SEE FROM THE BULLETED LIST CYBER-SECURITY PROGRAMS ARE

https://events.educause.edu/educause-live/webinars/2018/campus-wide-two-factor-authentication-2fa-saturation-campaign


Page 2

WELL WITHIN OUR MISSION SPACE AND WE HAVE PROGRAMS IN FORMAL CYBERSECURITY EDUCATION, TRAINING AND WORKFORCE DEPARTMENT OUR STAKEHOLDERS INCLUDE VETERANS, CRITICAL INFRASTRUCTURE AND THE GENERAL PUBLIC. WITHIN THE AREA OF WORKFORCE DEPARTMENT AND THIS IS KEY FOR US BECAUSE THE CYBERSECURITY WORKFORCE EXISTS THROUGHOUT THE STAKEHOLDER GROUPS THAT I MENTIONED. WE WANT TO MAKE IT EASIER FOR THOSE CYBERSECURITY EMPLOYERS TO BUILD A STRONG WORKFORCE AND WE PUT OUT FREE TOOLS AND IN YOUR OWN TIME PLEASE FEEL FREE TO EXPLORE THOSE TOOLS AND YOU'LL SEE THE LINK FOR THE WEBSITE AT N ICC S DOT U.S. CERTIFICATE.GOV IN THE LOWER RIGHT. YOU'LL OF THESE TOOLS ARE AVAILABLE PUBLICLY AND FOR FREE AND DESIGNED TO MAKE IT EASY FOR THE PUBLIC TO BUILD THEIR WORKFORCE. ALL OF OUR TOOLS ARE BASED ON THE NATIONAL CYBERSECURITY WORKFORCE FRAMEWORK. WE HAVE AN INTERACTIVE CYBERSECURITY WORKFORCE FRAMEWORK AND DIVIDED INTO THE SEVEN HIGH LEVEL CATEGORIES THAT YOU SEE. WITHIN EACH CATEGORY THERE ARE SPECIALTY AREAS AND ROLES AND KNOWLEDGE AND SKILLS AND ABILITIES THAT ARE REQUIRED. NOW THE FEDERAL GOVERNMENT DID NOT BUILD THE FRAMEWORK IF A VACUUM. WE USE THE INPUT OF NOT ONLY THE FEDERAL GOVERNMENT BUT ALSO STATE LOCAL AND TRIBAL AREA GOVERNMENT, EDUCATION, MILITARY AND INDUSTRY TO HELP US BUILD THIS FRAMEWORK. WE ALSO OFFER TO FEDERAL STATE LOCAL TRIBAL AND TERRITORY GOVERNMENT EMPLOYEE AND TO VETERANS ENVIRONMENT THAT OFFERED FREE CYBERSECURITY TRAINING TO THOSE EMPLOYEES AND WE WITH HAVE TWO HUNDRED FORTY-FIVE THOUSAND USERS INCLUDING THIRTY-ONE THOUSAND VETERANS AND COURSES AND IF YOU ARE A MEMBER OF ANY OF THOSE U.S. GOVERNMENT ORGANIZATIONS THAT I MENTIONED OR IF YOU ARE A U.S. VETERAN REGARDLESS OF YOUR EMPLOYMENT STATUS AT THE MOMENT FEEL FREE TO CHECK OUT DOT U.S. A LEARNING GOT GOV. AND YOU SEE A LINK AT THE BOTTOM OF THE SLIDE AND YOU CAN GET AN ACCOUNT AND TAKE CYBERSECURITY TRAINING FOR FREE. NATIONAL CYBERSECURITY AWARENESS MONTH IS THROUGHOUT THE MONTH OF OCTOBER EVERY OCTOBER. AND IT IS THIS YEAR OFFERING AN OVERARCHING THEME. CYBERSECURITY ARE SHARED RESPONSIBILITY AND WE ALMOST WORK TOGETHER TO IMPROVE OUR NATIONS CYBERSECURITY. WE HAVE FOUR KEY MESSAGES. FIRST IS TO STRENGTHEN THE NATION'S CYBERSECURITY ECOSYSTEM. THE ECOSYSTEM INCLUDES MANY THINGS BUT IT ALSO AND I THINK MOST IMPORTANTLY FOR OUR PURPOSES INCLUDES THE WORKFORCE, INCLUDES PEOPLE USING THE INTERNET WHICH IS ALL OF US TACKLE IT TOGETHER. THIS IS NOT A PROBLEM WHICH IS THE FEDERAL GOVERNMENTS ISSUE TO SOLVE. THIS IS NOT A PROBLEM WHICH IS NECESSARILY ONLY LIMITED TO INTERNET USERS. IT'S ALL OF US. BUILD A CYBERSECURITY WORKFORCE. THE NATION CANNOT BE SECURE WITHOUT A ROBUST CYBERSECURITY IN THAT WORKFORCE AND THAT WORKFORCE ITSELF


Page 3

MUST BE STRUCTURED THAT WITH ANY EMERGING THREAT THE WORKFORCE IS CAPABLE OF HANDLING IT. PROTECT CRITICAL INFRASTRUCTURE WHICH CYBERSECURITY IS A PART WHICH CUTS ESSENTIALLY TO THE HEART OF WHY WE HAVE THE DEPARTMENT OF HOMELAND SECURITY. I MENTIONED THE DEPARTMENT OF HOMELAND SECURITY AND HAPPY TO PROVIDE THE GRANT TO THE NATIONAL ALLIANCE WHICH IS IN TURN WORKING WITH UTAH VALLEY UNIVERSITY. ONE OF THE AREAS IN WHICH DHS HAS A GREAT CONCERN IS OUR ABILITY TO ACTUALLY AFFECT CHANGE. AND WHEN I SAY THAT I MEAN IT'S ONE THING TO PUT OUT A CYBERSECURITY AWARENESS MESSAGE. IT'S ANOTHER THING FOR THE RECIPIENTS OF THAT MESSAGE TO ACTUALLY IMPLEMENT IT AND MAKE CHANGES TO THEIR BEHAVIOR. THIS SATURATION CAMPAIGN I SEE AS A METHOD FOR UTAH VALLEY UNIVERSITY TO OBSERVE BEHAVIOR AND TO JUDGE WHETHER OR NOT MESSAGING ACTUALLY CHANGES BEHAVIOR. I'M PERSONALLY VERY INTERESTED TO HEAR WHAT ROBERT HAS TO SAY AND WITH THAT I WILL TURN IT OVER TO ROBERT.

>> ALRIGHT. THANKS, DAN. I APPRECIATE THAT INTRODUCTION. SO OUR CYBERSECURITY AWARENESS CAMPAIGN IS SOMETHING THAT WE LAUNCHED IN OCTOBER 2017. A LITTLE BIT ABOUT UTAH VALLEY UNIVERSITY, WE ARE THE LARGEST PUBLIC INSTITUTION IN THE STATE OF UTAH. CURRENTLY THIS YEAR WE HAVE THIRTY-NINE THOUSAND NINE WITH HUNDRED THIRTY-ONE STUDENTS. WE OFFER SIXTY FIVE BACHELORS' PROGRAMS AND DIPLOMA PROGRAMS AND WE HAVE A PRETTY LARGE STUDENT POPULATION AND DIVERSE POPULATION AS FAR AS MAJORS AND PROGRAMS. DUE TO OUR BACKGROUND AS A COMMUNITY COLLEGE THAT LAUNCHED IN 1941 AS A TECHNICAL COLLEGE DURING WORLD WAR II WE HAVE A COMMUNITY COLLEGE COMPONENT WITHIN THE UNIVERSE SO WE HAVE EVERYTHING FROM MECHANICS TO LIBERAL ARTS TO TECHNOLOGY AND ENGINEERING PROGRAMS. STARTING IN OCTOBER FIRST 2017, WE REQUIRED TWO FACTOR AUTHENTICATION WHICH WAS THROUGH DUE YO' FOR ALL FACT TEE AND STAFFING. IT BECAME MANDATORY. THERE WAS A PILOT PROGRAM BEFORE THAT BUT BECAME MANDATORY. OF COURSE WE SAW THERE WAS SOME RESISTANCE AMONG THE STAFFING AND FACULTY IN PARTICULAR BUT IT WAS A MANDATE SO EVERYONE JUST KIND OF GOT USED TO IT. HOW MANY OF YOUR INSTITUTIONS ARE USING TWO FACTOR AUTHENTICATION? NOT LOOKING AT THIS POLL. IT LOOKS LIKE ROUGHLY 50/50. SO THERE WAS ONE QUESTION AND I'LL GET TO THAT OH TOWARD THE END IF YOU CAN HOLD YOUR QUESTIONS, ADAM. OF THOSE WHO USE TWO FACTOR AUTHENTICATION WHO HAS A MANDATORY WHICH IS ACTUALLY WHAT BECKY IS MENTIONING. OKAY. SO IT LOOKS LIKE THE MAJORITY DO NOT HAVE IT MANDATORY. THAT'S GREAT. ONE THING WE FOUND WAS THAT THE BIGGEST OBSTACLE WE RAN INTO IN MAKING IT MANDATORY WAS JUST USER EDUCATION AND AS A FACULTY MEMBER I


Page 4

FEEL I CAN THIS BUT THERE WAS A LOT OF RESISTANCE AMONG FACULTY WHO DIDN'T WANT TO CHANGE WHAT THEY WERE DOING OR HAD THE FACE THE HORROR OF BRINGING THEIR CELL PHONE INTO THE CLASSROOM BUT THEN THEY COULD DO PUSH NOTIFICATIONS WHICH MADE IT EASIER TO ACCEPT. SO, ONE OF THE PROBLEMS WE HAD WITH THIS AND THIS KIND OF GOES BACK TO WHAT DAN WAS SAYING IS HOW DO WE ACTUALLY EFFECT THIS CHANGE? WE HAVE THIS GREAT TOOL THAT WE CAN USE FOR STUDENTS BUT HOW DO WE GET THEM TO USE IT AND HOW DO WE CONVINCE THEM TO USE THE WORDS OPTIONAL? WE'RE NOT GOING TO FORCE THE STUDENTS TO BE ABLE TO USE THIS SO WHAT DO WE DO? SOME OF THE BARRIERS WE RAN INTO WAS, YOU KNOW, THERE WERE AWARENESS. THEY DIDN'T KNOW IT WAS AVAILABLE. PERCEIVED INCONVENIENCE. SOME PEOPLE HAD HAD THAT EXPERIENCE TWO FACTOR AUTHENTICATION WHERE SENDING A MESSAGE NEVER SHOWS UP. THE LACK OF TECHNICAL KNOWLEDGE, NOT UNDERSTANDING WHAT IT IS OR WHAT IT TAKES TO IMPLEMENT IT, PRIVACY CONCERNS. WE HAD A LOT OF STUDENTS AND FACULTY AND STAFFING INITIALLY CONCERNED ABOUT PUTTING AN APP ON THEIR PHONE. WHAT CAN THEY SEE? CAN THE UNIVERSITY TRACK THEM THROUGH THAT APP? THOSE ARE REASONABLE CONCERNS BUT WE DON'T NECESSARILY, YOU KNOW, ADDRESS THOSE, THIS INSTALLED APP BECAUSE ON THE TECHNICAL SIDE WE'RE NOT THINKING ABOUT THAT. THE LAST ONE AND MAYBE ABOUT THE DIFFICULT ONE TO ADDRESS ARE EFFICACY. THERE ARE PEOPLE WHO BELIEVE THAT THEIR INFORMATION IS COMPROMISED, NO ONE IS ATTACKING THEIR UNIVERSE ACCOUNT IS A CONCERN. OUR SOLUTION THAT WE DEVELOPED WITH NCS A WAS THIS MULTI PRONG SATURATION CAMPAIGN IN OCTOBER OF 2017. IN SPRING OF 2017 WE WORKED THROUGH THE SUMMER ON THIS AND THEN REALLY RAMPED IT UP STARTING ABOUT MID-AUGUST AND THEN ROLLING IT OUT IN OCTOBER. WE HAD A LOT OF PARTICIPATION AND I THINK THAT WAS KEY TO MUCH OF THE SUCCESS WE HAD. OUR ADMINISTRATION, THE UNIVERSITY ADMINISTRATION WAS VERY RECEPTIVE TO THIS. THEY UNDERSTOOD THE BENEFITS, PARTIALLY THAT WAS DUE TO OUR CIO TALKING ABOUT WHAT A GREAT THING IT WAS, HOW IT WAS GOING TO HELP PROTECT THE UNIVERSITY AS A WHOLE. UNIVERSITY MARKETING AND PR DEPARTMENT PARTICIPATED IN THIS AND HELPED DEVELOP THE CAMPAIGN AND EXTERNAL PRS, COMPANIES THAT WORKS WITH NATIONAL CYBERSECURITY ALLIANCE IT ALSO CONTRIBUTED AND NATIONAL CYBERSECURITY ALLIANCE WE USED THEIR HASHTAG FOR THIS AS WELL AS SOME OF THEIR OTHER MATERIALS. DEPARTMENT OF HOMELAND SECURITY AS MANY STEIN MENTIONED WAS THE BACKBONE BEHIND THIS. THE OFFICE OF INFORMATION AND TECHNOLOGY FOR THE UNIVERSE ALSO WAS BEHIND THIS. WE HAD THE ADMINISTRATION SIDE LOOKING AT IT FROM AN ACADEMIC SCHOOLS AFFAIRS DEPARTMENT AND OUR OFFICE TECHNOLOGY LOOKING AT IT FROM A TECHNICAL PERSPECTIVE. THE INFORMATION SYSTEMS


Page 5

TECHNOLOGY DEPARTMENT WHERE CYBERSECURITY RESIDES ALSO WAS INVOLVED. OUR INSTITUTIONAL RESEARCH AS YOU'LL SEE WE HAD OUR NATIONAL INSTITUTION RESEARCH DEPARTMENT DO SURVEYS FOR BOTH THE PRECAMPAIGN AND POST CAMPAIGN AND BOTH WILL BE SUMMARIZED IN A COUPLE OF MINUTES. PROBABLY THE MOST INTERESTING COMPONENT OF THIS, ONE OF THE TENANTS OF UVU IS THIS CONCEPT OF ENGAGED LEARNING. WHAT WE HAD WAS STUDENT INVOLVEMENT AND THAT STUDENT INVOLVEMENT INVOLVED OUR MARKETING AND PR STUDENTS WHO HELPED DEVELOP THE CAMPAIGN, WORK ON SOCIAL MEDIA CAMPAIGN. THEY WERE ABLE TO WORK ON A CAMPAIGN THAT WAS FUNDED BY NCS A, AND THEY HAD THE EXPERIENCE OF ACTUAL PR PROFESSIONALS FROM COMPANIES AD ADVISING THEM ON THIS BUT REALLY THERE WAS A STUDENT LEAD INITIATIVE AS PART OF THIS. INITIALLY OUR CYBERSECURITY CLUB WHICH IS ALSO OUR CYBER COMPETITION TEAM WAS INVOLVED WITH THIS AND DID A LOT OF THE LEG WORK AND GOT OUT THERE AND BROUGHT THIS MESSAGE TO STUDENTS. SOME OF THE GOALS WE HAD FOR THIS CAMPAIGN WERE TO RAISE THE AWARENESS OF NATIONAL CYBERSECURITY AWARENESS MONTH AND LET PEOPLE KNOW THAT IT'S OUT THERE. IT'S GETTING MORE AND MORE PRESS BUT A LOT OF PEOPLE JUST DON'T KNOW WHEN THAT IS AND WE'VE GOT MORE INITIATIVES THAT WE'RE DOING THIS YEAR AS WELL TO INCREASE THAT AWARENESS. TWO STEP AUTHENTICATION AWARENESS AND ATTITUDES, WE ASKED QUESTIONS ABOUT WHAT PEOPLE ARE CONCERNED ABOUT LOSING, THAT SORT OF THING AND WE HAD A LOT OF OPEN-ENDED QUESTIONS TO FIND OUT WHAT PEOPLE WERE CONCERNED ABOUT. AND THEN WE PROMOTED NCS A WITH LOGIN MESSAGING AS WELL. SO, WE ADMINISTERED A PRECAMPAIGN SURVEY. WE SENT IT TO JUST OVER FIVE THOUSAND STUDENTS RANDOMLY DRAWN FROM THE STUDENT POPULATION. WE HAD ALMOST FIVE HUNDRED COMPLETE IT FOR ABOUT A NINE POINT 6% RESPONSE RATE. THERE WERE TWENTY-TWO QUESTIONS. THEY WERE OPEN-ENDED QUESTIONS, YES, NO, MULTIPLE CHOICE QUESTIONS AND ONE OF THE THINGS THAT WE RAN INTO IN DOING THIS WAS RESEARCH AND IT WAS GOING TO BE GENERALIZABLE. WE HAD TO GO THROUGH THE IRB PROCESS WHICH FOR THOSE OF YOU WHO HAVE A BACKGROUND WITH THAT, THAT'S THE REVIEW BOARD BASICALLY MAKING SURE THAT WHAT WE'RE DOING IS ETHICAL, WE'RE NOT DOING PRIVACY CONCERNS. WE'RE NOT TAKING ADVANTAGE OF CERTAIN POPULATIONS, THINGS LIKE THAT. SO THAT IS AN ADDITIONAL, IF YOU ARE JUST DOING SOMETHING FOR INTERNAL OFTEN YOU DON'T NEED TO DO THIS IF IT'S JUST A DEPARTMENTAL SORT OF THING BUT IN THIS CASE WE WERE PROVIDING INFORMATION EXTERNALLY AND MAKING IT GENERALIZABLE, WE NEED TO GO THROUGH THE IRB PROCESS. THESE WERE SOME OF THE SURVEY QUESTIONS THAT WE HAD. WE HAD OPINION QUESTIONS. HOW CONCERNED DO YOU THINK UVU IS ABOUT YOUR ONLINE SAFETY AS A STUDENT? WHAT ARE SOMEWAYS


Page 6

YOU CAN PROTECT YOUR ACCOUNT TO MAKE IT MORE SECURE? ONLINE BANKING, SOCIAL MEDIA, ETCETERA, AND ALSO HAVE YOU BEEN NOTIFIED OF A BREACH? THIS IS A SAMPLE OF THE TWENTY-TWO QUESTIONS AND ACTUALLY, BEFORE WE GET MUCH FURTHER, FOR THOSE OF YOU WHO HAVE TWO FACTOR AUTHENTICATION, DO YOU OFFER IT TO STUDENTS? AND DOES ANYONE REQUIRE IT? SO, IT LOOKS LIKE WE'RE ABOUT 50/50 ON MAKING IT AVAILABLE WHICH IS FANTASTIC BUT NATIONALLY 20%, 23% ARE REQUIRING IT SO THAT'S VERY INTERESTING. AT THE END I'D LOVE TO KNOW IF THERE WAS RESISTANCE FOR STUDENTS BEING REQUIRED TO DO THAT. LET'S MOVE ON. SO, WHAT WE DETERMINED AFTER DOING THAT SURVEY AND I'LL SHOW YOU SOME RESULTS TOWARD THE END BECAUSE WE COMPARED THE PREAND THE POST SURVEY. WE NEEDED TO DEVELOP THE MULTI PRONGED CAMPAIGN AND THIS WAS REFERRED TO AS A SATURATION CAMPAIGN AND THE IDEA BEHIND THAT WAS DEVELOPED IN PARTNERSHIP WITH NCS A AND DHS WAS TO HAVE THIS MESSAGING EVERYWHERE. WE HAD SOME INTERESTING ABILITY BECAUSE WE HAD A LARGE POPULATION, RIGHT NOW WITH THIRTY-SEVEN THOUSAND STUDENTS THAT WE HAD LAST YEAR, WE'VE GOT THIRTY-SEVEN THOUSAND STUDENTS IN A SMALL AREA, MOSTLY ON ONE CAMPUS. WE HAVE THE ABILITY TO COMPACT THEM VIA E-MAIL AND OTHER MESSAGING METHODS AND WE REALLY WANTED TO MAKE SURE THAT THIS MESSAGE WAS EVERYWHERE AND REALLY WAS IN EVERYONE'S FACE IN OCTOBER. SOME OF THE THINGS THAT WE USED AS PART OF THIS MULTI PRONG CAMPAIGN WAS AN E-MAIL AND VIDEO MESSAGING FROM THE ADMINISTRATION. THE PRESIDENT, PRESIDENT HOLLAND WHO IS OUR FORMER PRESIDENT, HE LEFT IN JULY RECORDED A MESSAGE THAT WAS FEATURED ON UVUS WEBSITE AS WELL AS OTHER PLACES AND WE'RE GOING TO SHOW YOU THAT VIDEO QUICKLY SO YOU CAN KIND OF SEE THE TONE THAT WAS BEING SET BY OUR ADMINISTRATION. [VIDEO CLIP].

>> CYBERSECURITY IS AN URGENT CRITICAL ISSUE HERE AND AROUND THE WORLD. IT'S NOW AFFECTING ALL PARTS OF OUR LIFE, COMMERCIAL POLITICAL EDUCATIONAL AND PERSONAL. AS UVU SITS IN THE HEART OF WHAT WE CALL SILICON SLOPES WE ARE PLEASED TO JOIN FORCES WITH THE NATIONAL CYBERSECURITY ALLIANCE TO BE THE FIRST UNIVERSE IN THE COUNTRY TO CONDUCT A CAMPUS SIDE CYBERSECURITY AWARENESS CAMPAIGN. UVU IS BECOMING A NATIONAL LEADER IN MANY AREAS AND CYBERSECURITY A ONE OF THEM. PLEASE JOIN ME AND THE REST OF UVUS FACULTY AND STAFFING TO IMPLEMENT IT ACROSS CAMPUS AND LOCK IN YOUR LOGIN WITH DUO TODAY.

>> THAT VIDEO WAS FEATURED PROMINENTLY SEVERAL PLACES AND KIND OF WAS USED TO KICK OFF THE CYBERSECURITY AWARENESS MONTH. ALSO THERE WAS AN E-MAIL BLAST FROM THE PRESIDENT AND THIS WAS SENT THROUGH A DIFFERENT CHANNEL THAN OUR USUAL METHOD. WE HAVE THE UVU NEED TO


Page 7

KNOW -- I KNOW IT'S A CUTE NAME BUT THE UVU NEED TO KNOW IS OUR NORMAL WEEKLY EVENT NOTIFICATION WHERE WE TALK ABOUT THINGS, TALK ABOUT PARKING CLOSURES, EVENTS HAPPENING ON CAMPUS, THE NORMAL KIND OF NEWSLETTER THAT YOU'D SEE. IN THIS CASE WE SENT A MESSAGE TO THE PRESIDENT TO THE ENTIRE POPULATION OF THE UNIVERSITY ENCOURAGING THEM TO LOOK INTO THIS, GO TO THIS WEB PAGE AND VISIT THIS INFORMATION SO THEY COULD SEE WHAT'S GOING ON AND TO UNDERSCORE THE IMPORTANCE OF THIS AND THE FACT THAT UVU IS CONCERNED ABOUT THIS. SO, ONE OF THE WAYS WE GOT THIS MESSAGE OUT WAS THROUGH OUR DIGITAL FILING SYSTEM. I DON'T KNOW HOW MANY OF YOU HAVE THIS BUT WE HAVE A SERIES OF DIGITAL SIGNS THROUGHOUT CAMPUS. AS YOU CAN SEE WE HAVE TWENTY-EIGHT HORIZONTAL LANDSCAPED ONES ROUGHLY THE SIZE OF A FIFTY-FIVE INCH TV. FIFTY-SIX PORTRAIT ONES THAT ARE PLACED THROUGHOUT CAMPUS AND FOUR BANNERS WHICH ARE THROUGH HORIZONTAL IN A ROW USUALLY OVER HIGH TRAFFIC HALLWAYS AND THESE ARE GREAT BECAUSE THEY CAN HOST MULTIPLE ROTATING ADVERTISEMENTS OF SORTS, ADVERTISING CAMPUS EVENTS OR PROVIDING INFORMATION ABOUT THIS. THEY ALSO HAVE THE ABILITY TO SHOW SHORT VIDEOS WITHOUT SOUND, OF COURSE, BUT THOSE VIDEOS AND OTHER DIGITAL ASSETS ARE NOT ONLY ROTATED THROUGH THE CAMPUS IN VARIOUS PLACES AND DIGITAL SLIDES ARE OFTEN PUT IN PLACES WHERE STUDENTS ARE GOING TO STOP, NEAR ELEVATORS AND THINGS LIKE THAT BUT THEY ALSO HAVE AN ONLINE GALLERY SO IF YOU SEE SOMETHING YOU ARE INTERESTED IN YOU CAN GO TO THAT GALLERY AND SEE THAT MESSAGING AGAIN. IT'S NOT ONE OF THOSE THINGS WHERE IT COMPLETELY DISAPPEARS. THOSE DIGITAL SIGNS WERE DEVELOPED PARTIALLY BY STUDENTS AND PARTIALLY FROM OUR MARKETING DEPARTMENT SO WE HAVE GOOD STUDENT INVOLVEMENT IN THAT. WE HAD POSTERS, TRADITIONAL PAPER POSTERS. THEY WERE NICE GLOSSY POSTERS AND THOSE WERE DISTRIBUTED TO GO ON DEPARTMENT BULLETIN BOARDS, STUDENT STUDY AREAS, CLASSROOMS AND THEY HAD THE CYBERSECURITY AWARENESS MONTH INFORMATION, THEY HAD LOCK IN OUR LOGIN AND INFORMATION WHERE TO GO TO GO TO THE MAINLANDING PAGE THAT WE HAD FOR THIS CAMPAIGN. WE HAD A SOCIAL MEDIA PRESENT. WE HAD FACEBOOK MESSAGES POSTED BY UVU ITSELF. UVU U.S., PRESIDENT HOLLAND WHICH HAD HIS OWN PAGE INCLUDING VIDEOS AND WE'VE GOT AN EXAMPLE OF ONE OF THE VIDEOS THAT WAS POSTED AND I THINK WE'LL START THAT RIGHT NOW.

>> I'M CONCERNED ABOUT EVERYONE'S SAFETY ON CAMPUS, PHYSICAL, EMOTIONAL AND DIGITAL WHICH IS WHY WE PROTECT ONLINE ACCOUNTS AT UVU USING STRONG AUTHENTICATION. DOWNLOAD DUO TODAY AND LOCK DOWN YOUR LOGIN.


Page 8

>> I WANT TO PROTECT MY PHOTOS AND VIDEOS AND OTHER MEMORIES FROM COLLEGE AS WELL AS MY SCHOOL ASSIGNMENTS FROM BEING HACKED. THAT'S WHY I LOCKED IN MY LOGIN THROUGH DUE YO'.

>> SEVENTY-TWO PERCENT OF AMERICANS BELIEVE THAT A USERNAME AND POSSIBLE WORD ARE /SEBG ENOUGH FOR LOCK IN TO SECURE THEIR ACCOUNTS BUT THEY ARE NOT. SIXTY-FOUR PERCENT /-FP AMERICANS HAVE EXPERIENCED A DATA BREACH. DOWNLOAD DUO AND LOCK DOWN YOUR LOGIN TODAY.

>> WE'RE HERE TO TALK TO YOU TODAY ABOUT HOW TO SECURE YOURSELF ONLINE USING DUO. IT'S DESIGNED TO PROTECT YOUR INFORMATION ONLINE WHETHER IT BE BANK ACCOUNTS, E-MAIL ADDRESSES, PASSWORDS OR SOCIAL MEDIA ACCOUNTS DUO CAN ASSURE THAT YOU ARE USING THE INTERNET SAFELY.

>> I WANT TO INVITE EACH ONE OF YOU TO JOIN US IN USING DUO TO PROTECT OUR ONLINE ACCOUNTS. DOWNLOAD THE DUO APP ON YOUR PHONE AND JOIN US IN SECURING YOUR STUDENT LOGINS TODAY.

>> IT IS YOUR RIGHT TO STAY SAFE ONLINE AND OUR SHARED RESPONSIBILITY TO PROTECT THE UVU ONLINE COMMUNITY AND THAT'S WHY I'VE OPTED IN FOR STRONGER LOCK DOWN THROUGH LOCK DOWN DUO.

>> WE GET PRETTY GOOD PRODUCTION QUALITY ON THOSE VIDEOS WHICH UNDERSCORES HOW SERIOUS WE WERE ABOUT THIS. WE HAD INVOLVEMENT THERE. WE HAD THE UNIVERSITY PRESIDENT AND THE CIO AND STUDENTS AND STUDENT REPRESENTATIVES AND WE REALLY WANTED TO MAKE SURE THAT THIS CONVEYED THE MESSAGE. THIS WAS A CAMPUS WIDE THING. THIS WASN'T JUST A MANDATE FROM THE IT DEPARTMENT OR FROM ADMINISTRATION. YOU CAN SEE AN EXAMPLE OF ONE OF THE POSTS THAT WAS POSTED PROMOTING THAT. THERE WERE SEVERAL OF THESE POSTS THROUGHOUT OCTOBER. WE ALSO HAD TWITTER AS ANOTHER ONE OF OUR METHODS. YOU CAN SEE OUR CYBERSECURITY CLUB PROMOTED IT. UVU SA PROMOTED IT AND THERE WERE SEPARATE VIDEOS THAT WERE POSTED AND OVERALL WE HAD A PRETTY SUCCESSFUL CAMPAIGN. AS FAR AS THE LOCK IN YOUR LOGIN THROUGH SOCIAL MEDIA COMMAND CENTER SAID WE HAD FIFTY-ONE THOUSAND IMPRESSIONS AND THAT'S PRETTY GOOD. DURING THE TIME AND YOU'LL SEE THE WEBSITE HERE IN A MINUTE BUT WE DROVE SEVEN THOUSAND PEOPLE TO THE WEBSITE TO SIGNUP. WE HAVE THE CYBERSECURITY CLUB AND THIS IS ONE OF THE MORE EFFECTIVE THINGS THAT WE DID. WE HAD STUDENTS FROM THE CYBERSECURITY CLUB WITH BANNERS AND SWAG TO GIVEAWAY AND STUFF


Page 9

LIKE THAT, IN HIGH TRAFFIC AREAS THROUGHOUT OCTOBER TALKING ABOUT WHAT TWO FACTOR AUTHENTICATION IS, WHY IT'S IMPORTANT, HOW PASSWORDS HAVE SHORTCOMINGS, DISCUSSING THE TALKING POINTS FROM NCS A ABOUT NOT REUSING PASSWORDS, USING STRONG PASSWORDS AND BASICALLY REALLY PROMOTING THIS IDEA OF STRONG AUTHENTICATION. THEN WE HAD THINGS SET UP WHERE THEY COULD ROLL RIGHT THERE ON LAPTOPS OR INFORMATION ON THEIR PHONES AND THEY COULD DOWNLOAD THE APP ANDEN ROLL ON THE SPOT WHICH WAS REALLY A GOOD CALL TO ACTION FOR THE STUDENTS BECAUSE IT WASN'T ONE OF THESE THINGS WHERE THEY TAKE A FLYER AND THROW IT IN THEIR BACKPACK AND DO IT LATER. WE CAN ACTUALLY SAY THIS IS WHAT YOU DO AND THIS IS HOW YOU SET IT UP AND IT ONLY TAKES A COUPLE MINUTES AND LET'S DO THAT RIGHT NOW. THAT WAS EFFECTIVE. AS PART OF OUR HACK OCTOBER THEME FOR CYBERSECURITY AWARENESS MONTH AND LAST WEEK WE HAD A CYBERSECURITY CHECK OUT TABLE WHERE WE HAD STUDENTS COME AND WE TALKED TO THEM ABOUT PASSWORDS, GOOD CYBER HYGIENE AND THINGS LIKE THAT AND WE BROUGHT UP THE FACT THAT THIS TWO FACTOR AUTHENTICATION IS HERE AND WE COULD DEMONSTRATE IT AND WE HAD A LOT OF PEOPLE WHO DOWNLOADED IT RIGHT THEN. IT'S ALSO REALLY EFFECTIVE AND WE FOUND THAT WHAT WAS PARTICULARLY EFFECTIVE WITH THE STUDENT TO STUDENT CONVERSATIONS WAS NOT NECESSARILY SAYING THIS PROTECTS YOUR UVU INFORMATION BUT TALKING ABOUT HOW IT CAN PROTECT THEIR GOOGLE AND GMAIL ACCOUNTS, THEIR INSTAGRAM ACCOUNTS AND ALL THESE THAT YOU CAN USE WITH DUO OR OTHER SOLUTIONS REALLY SEEMED TO RESINATE WITH THE STUDENTS BECAUSE THEY DIDN'T ALWAYS WORRY ABOUT THEIR USER INFORMATION AS MUCH AS THEY WORRIED ABOUT SAY THEIR GMAIL OR THEIR FACEBOOK OR INSTAGRAM ACCOUNTS AND ONE THING THAT WE REALLY DROVE HOME WAS THE FACT THAT THIS SORT OF STRONG AUTHENTICATION CAN BE USED THROUGHOUT VARIOUS APPLICATIONS ONLINE. I NOTICED SOMEBODY IN THE COMMENTS HAD MENTIONED THAT GMAIL IS REQUIRING IT AND GETTING PEOPLE USED TO IT AND THAT'S SOMETHING WE'RE ACTUALLY SEEING IS THAT MORE AND MORE STUDENTS ARE USING IT OUTSIDE OF, YOU KNOW, UVUS AND OTHER TYPEINGS YOU ARE SEEING WITH GMAIL A LOT AND AS WELL AS FACEBOOK AND OTHER APPLICATIONS. WE FEATURED THIS ON OUR HOMEPAGE, OUR LANDING PAGE AND HAD A DEDICATED LANDING PAGE FOR IT AS WELL. HERE'S AN EXAMPLE OF WHAT IT LOOKED LIKE ON OUR FLASH CYBERSECURITY PAGE AND UVU MADE THIS INFORMATION TO ALL UVU USERS AND BY INSTALLING THE APP, DISCOVER ABOUT WHY THIS IS IMPORTANT TO LOCK DOWN YOUR LOGIN AND WHEN YOU ARE READY CLICK HERE TO ENABLE THIS PROTECTION THROUGH THE MY UVU PORTAL AND THAT TOOK THEM TO THE ENROLLMENT PAGE AND ONE OF THE THINGS THAT WE DID WITH THIS WAS, YOU KNOW, YOU NOTICE THE MESSAGING IS REALLY A POSITIVE. IT'S NOT, HEY,


Page 10

WE'RE REQUIRING THIS OR WHATEVER. IT'S WE'VE MADE THIS AVAILABLE FOR ALL USERS AND WE WANT TO POSITION THIS AS THIS IS SOMETHING EXTRA WE'VE DONE AND IF YOU LISTEN TO THE MESSAGE FROM PRESIDENT HOLLAND AND THE OTHER SPEAKERS IN THE VIDEOS YOU'LL SEE THAT THE IDEAL, THIS IS SOMETHING WE'RE DOING TO MAKE EVERYBODY IN THE UVU COMMUNITY MORE SECURE. SO, MONTH OF SATURATION WHERE YOU BASICALLY CAN'T GO ANYWHERE WITHOUT SEEING THIS MESSAGING. WE DID A POST CAMPAIGN SURVEY ESSENTIALLY MOSTLY IN JANUARY. IT WENT TO FIFTY-FIVE HUNDRED STUDENTS. WE HAVE TWO HUNDRED AND EIGHT COMPLETE FOR A 5% RESPONSE RATE WHICH IS TYPICAL FOR THIS SORT OF SURVEY. SO, THESE ARE THE RESULTS WHICH IS THE MEAT OF WHAT WE HAVE HERE. YOU CAN SEE BEFORE AND AFTER HOW CONCERNED THE UVU IS ABOUT YOUR ONLINE SAFETY. IT WENT UP. SOME UP SOME DOWN, A LITTLE WENT DOWN AND NOT AT ALL. I WOULD SAY THE SAME SO THE SAME NUMBER OF SIN EXPREAND POST. THERE WAS A CHANGE IN THE PERCEPTION OF THIS. INTERESTINGLY THEY USE A DIFFERENT PASSWORD FOR EACH ACCOUNT ACTUALLY WENT DOWN A LITTLE BIT. THIS, WE DON'T KNOW WHETHER THAT IS SAMPLING AND THAT'S STATISTICLY SIGNIFICANT BUT KIND OF AN INTERESTING RESULT. WHEN WE TALK ABOUT THE COMBINATION OF LOGIN AND PASSWORD MOSTLY THE SAME. NOT A LOT OF CHANGE IN THAT ONE. BUT HERE'S WHERE WE START SEEING SOME INTERESTING THINGS. WE HAVE THE DEFINED MULTIFACTOR AUTHENTICATION. WHAT IS IT? THE LIGHT GREEN ARE THE PRERESULTS, THE DARK GREEN ARE THE POST SURVEY AND YOU'LL SEE THAT THE CORRECT IDENTIFICATION OF THAT, WE STILL HAD A FOURTEEN PERCENT JUMP IN THAT AND YOU'LL SEE THAT SOME OF THESE MISCONCEPTIONS LIKE THE USE OF A PERSONAL QUESTIONS DROPPED GREATLY. AWARENESS OF THAT, 20% WERE AWARE OF THE NATIONAL CAMPAIGN. 34% WERE AWARE OF THE ON CAMPUS CAMPAIGN. THE MESSAGING THAT WE WERE USING AND WE WERE REALLY PUSHING DOWN THAT LOCK DOWN YOUR LOGIN, 50% WERE FAMILIAR WITH IT UP FROM 29%, ALMOST 30% AFTER THAT. YOU ALSO SEE THAT WE HAD STAY SAFE ONLINE WHICH WE HAD IN THERE AND I'M NOT SURE, WHICH IS NOT ACTUALLY A MESSAGE. WE DID HAVE SOME THAT DIDN'T HAVE ANYTHING ELSE IN THERE BUT SOME OF THESE OTHER MESSAGES YOU CAN SEE ARE THINGS THAT ARE NCS A MESSAGING AND THE ONE WE PUSHED WAS THAT LOCK IN OUR LOGIN WHICH WAS A HASHTAG WE WERE USING THROUGHOUT THE CAMPAIGN. WE GATHER INFORMATION ABOUT THIS AND THE REST OF THE CYBERSECURITY COURSES ARE INFORMATION. WE CREATE A GENERAL ED COURSE THAT IS A BASIC CYBERSECURITY 101 THAT DOESN'T REQUIRE THE TECHNICAL KNOWLEDGE OF SOME OF OUR OTHER CYBERSECURITY COURSES BUT SORT OF A CYBER, YOU KNOW, GOOD CITIZENSHIP COURSE TO GIVE PEOPLE A BASIC UNDERSTANDING OF WHAT'S GOING ON AND REALLY BE ABLE TO COMMUNICATE THE IMPORTANCE OF CYBERSECURITY AND THE ABILITY TO


Page 11

PROTECT EVERYONE'S INFORMATION AND YOUR OWN INFORMATION. YOU CAN SEE WE HAD A LITTLE BIT OF A CHANGE IN INTEREST IN CYBERSECURITY CAREERS. WE WERE HOPING FOR A LITTLE BIT MORE BUT ONE OF THE THINGS IS THAT, YOU KNOW, WHEN YOU ARE DEALING WITH COLLEGE STUDENTS A LOT OF THEM HAVE THEIR CAREERS IN MIND BUT WE FOUND OTHER THINGS BECAUSE WE ASKED WHAT THINGS INTEREST THEM AND YOU'LL SEE THAT IT'S PRETTY CONSISTENT BEFORE AND AFTER BUT REALLY THE BIG ONE IS IDENTITY THEFT. THAT'S WHAT OUR COLLEGE STUDENTS ARE MOST CONCERNED ABOUT WITH AROUND MID '60S PERCENT AND THEN SECURE BANKING, EVEN OTHER THINGS THAT YOU MIGHT EXPECT LIKE SOCIAL NETWORKS AND THINGS LIKE THAT, SOCIAL NETWORKS THE CONCERNS ARE DOWN AROUND NINE TO 12%, PRIVACY AND SECURITY, BULLYING, SOME OF THESE OTHER THINGS, SHOPPING ONLINE, NONE OF THEM SEEMED TO RESINATE AS MUCH /OS IDENTITY THEFT AND SECURE BANKING. THAT WAS AN INTERESTING FIND AND SOMETHING THAT MAY BE WORTH INCORPORATING IN FUTURE MESSAGING WHEN WE'RE TALKING ABOUT TRYING TO SHIFT PEOPLE'S BEHAVIORS. SO A COUPLE OF DIFFERENT THINGS HERE ARE HOW DID THEY LEARN ABOUT THE CAMPAIGN? AND YOU'LL NOTICE THAT E-MAIL FROM PRESIDENT HOLLAND WHICH WAS THE MAIN THING, 62% SO THOSE WHO WERE FAMILIAR WITH IT ALMOST TWO THIRDS GOT IT FROM THAT E-MAIL. DIGITAL SIGNAGE, THE TECH ALERTS, THAT MESSAGE FROM UNIVERSITY PRESIDENT AS YOU SAW IN THE VIDEO, THAT WAS A REALLY, REALLY GOOD SOURCE OF DISSEMINATING THIS INFORMATION BECAUSE THE STUDENTS PAY ATTENTION TO WHEN THEY GET THOSE E-MAILS. NOW, FEW AND FAR BETWEEN E-MAILS, ONCE A MONTH ON AVERAGE IF THAT SO WHEN YOU CAN HAVE SOMETHING THAT HAS THAT LEVEL OF IMPACT TIED TO A CAMPAIGN LIKE THIS, IT REALLY INFLUENCES THE STUDENTS TO GO CHECK IT OUT AND SEE WHAT'S GOING ON. AFTER THE CAMPAIGN, SO THE ONES WHO ACTUALLY INSTALLED TWO FACTOR, THESE ARE THE VARIOUS PROJECTS. ENABLING IT ON E-MAIL, ONE OF THE MESSAGES THEY HAD BEHIND THAT WAS THE FACT THAT MOST PEOPLE GO TO THEIR GMAIL AND IF YOU'RE OTHER E-MAIL SERVICE WAS COMPROMISED THAT BASICALLY OPENED YOU TO BEING A VICTIM. LIKELIHOOD OF USING MULTIFACTOR IDENTIFICATION. WE'VE GOT BETWEEN LIKELY AND VERY LIKELY 70%. YOU KNOW, WE'VE GOT BASICALLY 30% AS NOT VERY LIKELY OR NOT LIKELY AT ALL BUT 70% IS A PRETTY GOOD, YOU KNOW, ADOPTION RATE FOR USING THAT. THE RECOMMENDATION WE'RE AT 90% AT YES OR MAYBE SO, YOU KNOW, THAT'S AN OVERALL POSITIVE VIEW OF THE MULTIFACTOR AUTHENTICATION. ONE OF THE THINGS THAT WE'RE SHORT ON WAS PROMOTING NATIONAL CYBERSECURITY AWARENESS MONTH, WE ONLY HAD 18% KNOW THAT THAT'S WHEN IT WAS. IN LOOKING AT OUR CAMPAIGN, I THINK PART OF THE REASON IS THAT WE HAD SO MUCH FOCUS ON DOING THE TWO FACTOR, DOING THE LOCK DOWN YOUR LOGIN THAT THE IDEA THAT IT WAS


Page 12

CYBERSECURITY AWARENESS MONTH WAS KIND OF LOST IN THE MIX. ONE OF THE THINGS WE'RE DOING THIS YEAR AS I MENTIONED WE'RE DOING HACK OCTOBER AND A SERIES OF EYE VENTS THAT WE'RE DOING IN HIGH TRAFFIC AREAS AND WE DID THE CYBERSECURITY AWARENESS CHECKUP THAT I MENTIONED EARLIER. THIS WEEK WE HAD A LOCK PICKING EVENT WHICH JUST WENT OVER INSANELY WELL. STUDENTS LOVE TO PICK LOCKS AND WE WERE ABLE TO TIE THAT TOGETHER IN CYBERSECURITY AND HAD OUR SIGNAGE AND MESSAGING THERE AS WELL. NEXT WEEK WE ARE PROMOTING A CAPTURE THE FLAG COMPETITION. CYBERSECURITY CLUB IS USING THEIR CT F PLATFORM TO CREATE A GAME THAT APPEALS TO EVERYBODY NOT JUST THE COMPUTER SCIENCE AND IT STUDENTS. THEN WE'VE GOT SPEAKERS FOR THE END OF THE MONTH AND THEN I THINK WE'RE GOING TO END UP DOING ANOTHER SESSION WITH THE CYBERSECURITY CHECKUP BECAUSE IT WAS SO POPLAR BUT AGAIN THIS IS SOMETHING WHERE WE'VE BEEN ABLE TO SIGNUP PEOPLE ON THE SPOT FOR THESE SERVICES. ONE OF THE THINGS WE ASKED IS WHERE TO FIND INFORMATION ABOUT STAYING SAFE ONLINE. STILL ONLY FOURTEEN PERCENT KNEW WHERE TO FIND THAT EVEN THOUGH WE HAVE AN OI T PAGE. WE WERE SUCCESSFUL IN GETTING THEM TO SIGNUP FOR DUO AND THE MULTIFACTOR AUTHENTICATION BUT NOT NECESSARILY TO INCREASE THE AWARENESS OF WHERE TO GO FOR OTHER INFORMATION. THIS WAS A VERY TARGETING MESSAGE AND A VERY SPECIFIC MESSAGE BUT IT DIDN'T HAVE A LOT OF KIND OF THE SECONDARY EFFECTS THAT WE THOUGHT IT MIGHT AS FAR AS JUST MORE GENERAL AWARENESS OF WHAT UVU OFFERS. FOR THOSE WHO DOWNLOADED IT, OR THOSE WHO TOOK IT, WE HAD 24% WHO DOWNLOADED IT, 34% WHO HEARD OF IT AND DIDN'T DOWNLOAD IT AND 42% WHO HADN'T HEARD OF IT. WE MANAGED TO GET A BIT BETTER THAN HALF THE POPULATION. NOT ONLY KNEW ABOUT IT BUT REMEMBERED IT SO THAT'S ONE OF THE TRICKS BECAUSE WE DID THIS SURVEY IN JANUARY SO WE WANTED TO SEE HOW THE MESSAGE STUCK. ABOUT THREE MONTHS LATER. HOW WE LEARNED ABOUT DUO? SORRY. WHETHER IT WAS WORTHWHILE TO DOWNLOAD IT. 63% OF THOSE WHO DOWNLOADED IT THOUGHT IT WAS WORTHWHILE. SO THE OVERALL IN EXPERIENCE HAS ABOUT GOOD FOR THOSE WHO DOWNLOADED IT. HOW I WOULD ENCOURAGE OTHERS TO DOWNLOAD DUO? IT'S EASY AND FREE AND IT WILL MAKE THEM SAFER ONLINE. THAT MESSAGING REALLY CAME TO RESINATE WITH THE FACT THAT IT'S EASY AND FREE AND FOR THEIR OWN PROTECTION TO MAKE THEM SAFER ONLINE. HERE'S SOME OF OUR KEY FINDINGS. THE LOCK IN YOUR LOGIN WENT UP. THE CORRECT DEFINITION OF WHAT MULTIFACTOR AUTHENTICATION WAS WENT FROM 20% TO FIFTY-SEVEN PERCENT AND WE THINK THAT'S A HUGE WIN. PEOPLE KNOW WHAT'S GOING ON. THE E-MAIL LEAD TO EIGHT HUNDRED VIEWS OF THE DUO SITE AND WE MEAN THE DUO LANDING PAGE WE HAD TOEN ROLL. THAT WAS PRETTY MUCH INSTANTLY. AS I MENTIONED, 16% WERE INFLUENCED BY OTHERS SOCIAL


Page 13

MEDIA AND THEN HERE'S JUST THOSE LAST FINDINGS THAT WE HAD AS FAR AS WHO WOULD RECOMMEND IT, WHETHER IT WAS WORTHWHILE, THINGS LIKE THAT. AND THAT'S THE END OF THE SLIDES. I THINK WE'VE GOT SOME QUESTIONS.

>> THAT'S GREAT. THANK YOU SO MUCH, ROBERT. WE REALLY APPRECIATE YOU SHARING YOUR EFFORTS THERE AT UVU. ONE THING I THINK WE'LL GO BACK SINCE YOU RECENTLY WERE TALKING ABOUT THIS. A FEW FOLKS WERE CURIOUS ABOUT THE LOCK PICKING EVENT. WAS IT A COMPETITION? SHARE MORE ABOUT HOW YOU ORGANIZED THAT EVENT.

>> OUR HACK OCTOBER LOCK PICKING EVENT WAS ACTUALLY REALLY STRAIGHTFORWARD. WE HAD THE BENEFIT OF HAVING A PRETTY ROBUST CYBERSECURITY TEAM HERE IN UTAH AND WE WERE ABLE TO BORROW FROM ONE OF THE LOCAL CYBERSECURITY CONFERENCES THERE IN LOCK PICK VILLAGE EQUIPMENT AND WE HAD PICKS AND LOCKS AND ALL THE TOOLS AND THEN WE BASICALLY PUT UP A BIG EIGHTY INCH MONITOR WITH DEMONSTRATIONS, PUT ON SOME ELECTRONIC MUSIC AND SET UP JUST TABLES WITH STUDENTS THERE TO HELP AND HAD OUR HACK OCTOBER SIGNAGE AND JUST LET PEOPLE COME UP AND SAY HEY ARE YOU INTERESTED IN THIS? WHILE THEY WERE LEARNING WE TALKED ABOUT CYBERSECURITY AND UNDERSTANDING THE FLAWS AND LOCKS USED TO EXPLOIT THEM AND SAME SORT OF THING WITH SOFTWARE, HOW YOU DON'T JUST RELY ON LOCKS SO DON'T JUST RELY ON PASSWORDS, THAT SORT OF THING SO THERE WAS NO COMPETITION. IT WAS ESSENTIALLY TABLES OF STUDENTS SITTING DOWN AND TRYING IT AND TALKING TO EACH OTHER. SO, IT WASN'T ANY KIND OF COMPETITION. WE DID HAVE ONE WITH THE CYBERSECURITY CLUB BEFORE TO KIND OF WARM THEM UP SINCE THEY WERE A LOT OF THE STUDENTS PARTICIPATING BUT IT WAS KIND OF A SIT DOWN AND CHAT AND WE HAD A LOT OF STUDENTS THERE. WE'LL HAVE SOME MEDIA COVERAGE COMING OUT ON FRIDAY I BELIEVE BUT IT WAS ESSENTIALLY JUST HANGING OUT AND TALKING ABOUT PICKING LOCKS AND CYBERSECURITY AND IT WAS GREAT FOR THE AWARENESS AND WE HAD JUST A CONSTANT STREAM OF STUDENTS FOR THE FOUR HOURS WE DID THAT YESTERDAY.

>> THAT SOUNDS LIKE A LOT OF FUN. WE'VE OFFERED SOMETHING SIMILAR AT OUR SECURITY CONFERENCE AND I KNOW OUR ATTENDIES ALWAYS ENJOYED THAT. THERE HAVE BEEN A COUPLE OF QUESTIONS FROM FOLKS ABOUT WHAT APPLICATIONS MIGHT BE REQUIRED? HOW ARE YOU USING AT UVU, WHAT SERVICES ARE COVERED, E-MAIL BANNER, OTHER THINGS, MAYBE MORE SPECIFIC FOR FACULTY AND STAFFING.


Page 14

>> SO THE MAIN THING IS WE HAVE A SINGLE SIGN ON SYSTEM AND SO THAT IS MOSTLY USED THROUGH A SINGLE SIGN ON SYSTEM AND THAT SYSTEM IS USED FOR MY UVU WHICH IS OUR PORTAL THAT HAS ACCESS FOR FACULTY AND STAFFING, THE BANNER, ALL THE STUDENT REGISTRATION INFORMATION AND IT ALLOWS THEM TO GET TO THEIR CANVAS CLASSES AS WELL AS OTHER THINGS. OUR TRAVEL SYSTEM AND THINGS LIKE THAT. IT'S NOT ON EVERY SYSTEM AND THERE ARE SOME SYSTEMS THAT DUE TO INTEGRATION AND THINGS LIKE THAT ARE NOT SET UP WITH THAT BUT IT'S THE MAJORITY OF OUR CAMPUS SYSTEMS THAT GO THROUGH THE SINGLE SIGN ON AND AGAIN, THIS IS DONE ON A PERUSER BASIS WHETHER IT PROMPTS OR NOT SO YOU CAN SINGLE SIGN ON ON CAMPUS BUT WHERE THE FACULTY HAS IT SET UP IT'S GOING TO PROMPT YOU FOR THAT EVERY TIME.

>> YEP. AND THEN WHAT ABOUT FOR THINGS LIKE OFFICE 365 OR OTHER KIND OF E-MAIL SOLUTIONS THAT CAMPUSES MIGHT BE USING? DO THEY STILL USE THAT SINGLE SIGN ON?

>> SO OUR OFFICE 365 DOES NOT CURRENTLY USE THE SINGLE SIGN ON EVEN THOUGH IT DOES AUTHENTICATE THROUGH OUR APP BUT RIGHT NOW IT'S NOT TWO FACTOR AUTHENTICATION FOR THAT. FOR STUDENT E-MAIL WE'RE ACTUALLY USING GMAIL SO THE GOOGLE OFFICE SUITE FOR THAT.

>> THANKS AND THEN SOMEONE HAD A RELATED QUESTION. YOU HAVE A POLICY FOR APPS THAT DON'T SUPPORT MODERN AUTHENTICATIONS?

>> WITH THAT, AS FAR AS JUST OUR UNIVERSITY APPLICATIONS?

>> I THINK THAT'S WHAT THEY MEANT.

>> SOME OF THOSE HAVE LEGACY APPLICATIONS THAT ARE JUST AUTHENTICATING THROUGH THE APP AND THERE'S AN INITIATIVE TO GET ALL OF THOSE MOVED OVER BUT FOR RIGHT NOW LIKE ANYBODY ELSE WE DO HAVE LEGACY APPS BUT MOST THINGS ARE GOING TO THE SINGLE SIGN ON.

>> RIGHT AND SO SOMEONE IS ASKING DO YOU USE CHESTED DEVISED OPTION WITH DUO?

>> WITH OUR DUO AUTHENTICATION WE BASICALLY DO THE TRUST US DEVICE FOR 24 HOURS.

>> OKAY.


Page 15

>> YOU'LL STILL NEED TO DO IT AT LEAST ONCE IN THAT 24 HOUR PERIOD.

>> YEP. THANKS. GREAT. HOW HAVE YOU HANDLED PEOPLE WHO MIGHT NOT NECESSARILY WANT TO USE THEIR PHONES FOR TWO FACTOR AUTHENTICATION. YOU MIGHT HAVE SEEN A LITTLE EARLIER BACK AND FORTH IN THE CHAT ABOUT PEOPLE WORRYING ABOUT NOT WANTING THEIR PHONE ASSOCIATED.

>> I ACTUALLY TOTALLY UNDERSTAND THAT. WHAT WE'VE PROVIDED WITH THAT IS WE INITIALLY LET PEOPLE DO S IS M.S. MESSAGES BUT WE'VE MOVED AWAY FROM THAT DUE TO CONCERNED ABOUT SECURITY. WE HAVE KEY APPS AVAILABLE AND I DON'T KNOW ALL THE DETAILS BUT THE WAY THEY INITIALLY ROLLED THIS OUT WITH FACULTY AND STAFFING IS THEY DID NOT WANT TO INSTALL THE APP OR USE THE SMS. THEY COULD GO IN AND JUST BUY ONE OF THE DUO FABS USING THE DEPARTMENT FUNDS. DEPARTMENTS WERE ABLE TO BUY THOSE. WE DO STILL SUPPORT THE HARD TOKENS AS WELL AND WE DO HAVE THAT AVAILABLE FOR THOSE WHO ARE RELUCTANT TO USE THEIR PHONES OR DON'T WANT TO USE THEIR SMART PHONES. WE DO HAVE AN OPTION FOR THOSE PEOPLE.

>> GREAT. AND THEN YOU TALKED A LOT ABOUT HOW STUDENTS REACTED TO THE CAMPAIGN AND ROLLING OUT DUO? HOW ABOUT FACULTY? HOW DID THEY REACTOR MAYBE CONTRACTORS?

>> SO, AND I ACTUALLY HAD MADE A COMMENT ABOUT THIS DISCUSSING THIS WITH LOCAL BUSINESS OWNERS LATELY OR LAST YEAR. FACULTY ARE VERY SET IN THEIR WAYS. THERE WAS MORE RESISTANCE WITH FACULTY THAN STAFFING AND IN FACT I WAS ON FACULTY SENATE AT THAT TIME AND I POINTED OUT HOW SIMPLE AND WAS AND DID THAT SEEM TO SWAY MOST OF THE ONES BUT THERE WERE CERTAINLY ONES WHO DON'T LIKE IT BUT I THINK PEOPLE ARE GETTING USED TO IT AND ONE OF THE THINGS THAT I'VE SHOWN PEOPLE IS WHEN YOU GET THAT DUO AUTHENTICATION SCREEN YOU CAN HAVE IT AUTOMATICALLY SEND THE PUSH INSTEAD OF HAVING TO SELECT THE METHOD AND DOING THAT AND HAVING IT POP UP AS A NOTIFICATION MAKES IT QUICK AND PAINLESS SO WHILE THERE WAS CERTAINLY RELUCTANCE TO THE ADOPTION USER EDUCATION GOES ALONG WAYS AND THEN JUST EXPLAINING TO THEM THE EXTRA LEVEL OF PROTECTION IT PROVIDES ESPECIALLY WHEN YOU ARE TALKING ABOUT INTEGRITY OF GRADES AND TESTS AND THINGS LIKE THAT, THAT REALLY HITS HOME WITH THE PROFESSORS WHEN YOU SAY, HEY LOOK THIS KEEPS STUDENTS OUT OF CANVAS EVEN IF SOMEHOW THEY GET YOUR PASSWORD THEY WON'T BE ABLE TO GO IN AND SEE YOUR EXAMS OR CHANGE GRADES. IT'S JUST ABOUT


Page 16

MESSAGING AND MAKING IT RELEVANT TO THAT PERSON'S CONCERNS.

>> GREAT. THANK YOU. MOVING FORWARD DO YOU HAVE AN ONGOING CAMPAIGN THAT WILL TARGET INCOMING STUDENTS BECAUSE YOU'LL HAVE TURNOVER AS STUDENTS GRADUATE AND NEW ONES COME IN SO HOW ARE YOU REACHING OUT TO THEM WHEN THEY FIRST ARRIVE ON CAMPUS?

>> WE DO HAVE INFORMATION WHEN THEY FIRST GET THEIR ID ON HOW TO SET THAT UP AND THEN A BIG PART OF IT WE'RE JUST RELYING ON THIS CYBERSECURITY AWARENESS MONTH OCTOBER NOTIFICATION TO GET THAT MESSAGE OUT EVERY OCTOBER. AND ONE OF THE THINGS WE'RE REALLY FOCUSING ON IS JUST MAKING IT KIND OF THE NORM SO THAT THE STUDENTS EXPECT IT AND THEN SOMEBODY MENTIONED COMMENTS EARLIER. STUDENTS ARE BECOMING MORE AND MORE ACCUSTOMED FOR THIS AND CLASSES, NONE TECHNICAL SUBJECTS, A LOT OF STUDENTS ARE DOING TWO MAIL AUTHENTICATION WHEN THEY GO IN FOR GMAIL AND I THINK THAT A LOT OF THE BARRIERS ARE BREAKING DOWN AND STUDENTS ARE KIND OF EXPECTING THIS AND AGAIN, YOU KNOW, THIS IS SOMETHING WE HOPE THAT EVERYBODY WILL ENABLE BUT SO MUCH OF IT IS JUST USER AWARENESS.

>> RIGHT. DO YOU HAVE AN ANALYTICS ON HOW MANY PEOPLE HAVE USED IT THAT YOU CREATED?

>> WE DO HAVE THAT INFORMATION. I DON'T ACTUALLY HAVE IT WITH ME THOUGH.

>> NO PROBLEM. MAYBE WE CAN SHARE THAT OUT AS WE LOOK AT SLIDES AFTER THE EVENT. I'LL ASK ANOTHER QUICK ONE AND THEN I'LL NEED TO WRAP UP. WHAT'S THE DUO SESSION TO BE REACHED?

>> 24 HOURS.

>> YOU HAD MENTIONED THAT BEFORE.

>> SO THAT DEVICE WILL BE /AUPBLGEN INDICATED FOR 24 HOURS AND AS I MENTIONED DON'T USE THE TRUSTED DEVICE AND A LOT OF IN AN IS BECAUSE WE'RE HAVING STUDENTS LOGIN FROM ALL OVER CAMPUS SO YOU DON'T WANT TO TRUST A DEVICE IN THE CLASSROOM NECESSARY.

>> GREAT. WELL I WANT TO THANK YOU AGAIN, ROBERT FOR ANSWERING THESE QUESTIONS HERE. WE DID NOT GET TO EVERYONE'S, I APOLOGIZE FOR THAT BUT THANK YOU FOR ALL OF THE CHAT QUESTIONS AND ANSWERS YOU


Page 17

HAD GOING ON THERE DURING THE ENTIRE WEBINAR. ON BEHALF OF EDUCAUSE AND SPEAKERS THIS IS VALERIE AND I THANK YOU ALL FOR JOINING US FROM AROUND THE WORLD FOREIGN ENGAGING DISCUSS PLEASE CLICK ON THE WILL LINK IN THE BOTTOM LEFT CORNER OF THE SCREEN. YOUR COMMENTS ARE IMPORTANT FOR US: PLEASE FEEL FREE TO SHARE IT WITH YOUR COLLEAGUES AND FINALLY I HOPE YOU'LL JOIN US ON NOVEMBER. ON BEHALF OF EDUCAUSE THIS IS VALERIE VOGUE HE WILL. THANKS FOR JOINING US TODAY FOR EDUCAUSE LIVE

END OF WEBINAR

events.educause.edu · web viewdo you have an analytics on how many people have used it that you...

Documents