About InfoSec at Middlebury
Information security is a shared responsibility, and ITS is committed to providing the Middlebury community with the resources it needs to build habitual safe practices and mitigate risks.
A Message from Chris in ITS
Thanks for visiting! Middlebury’s Information Security web pages are intended to provide our community with guidance on safe computing practices, how to protect sensitive information, and details about our information security policies and Middlebury’s approach to cybersecurity.
Middlebury’s global information security program is directed by ITS and governed by an Information Security Advisory Committee (ISAC) to provide SLG-level oversight of this critical function.
Here are several examples of how ITS works (with ISAC support) to protect Middlebury’s accounts, data, devices, systems, networks and the technology services that our community depends on:
- Middlebury accounts are protected by Multi-Factor Authentication (MFA)
- Middlebury devices and servers are protected from malware and ransomware with automated endpoint security software and monitored for security alerts
- Middlebury devices, servers, and cloud services leverage strong encryption to protect Middlebury data from unauthorized access
- Middlebury network services are monitored for suspicious activity and configured to protect us from both internal and external network security threats
- Middlebury email services leverage security filtering to help protect our community from phishing scams and other email-borne cyber threats.
These automated security protections are always on, helping to shield Middlebury from the most serious cyber threats. It is also important for every community member to understand that their own safe computing practices are crucial to keeping Middlebury safe from digital harm.
Most cybersecurity incidents can be traced back to the receipt of (and response to) a malicious email.
- Be particularly cautious about emails from external senders claiming to be someone from Middlebury, as these are almost always scams
- Be wary of email attachments from unknown senders, as they may contain malware or redirects to malicious websites
- Remember that Middlebury community members can forward any suspect email to email@example.com for analysis by ITS
TLDR; How to avoid causing an information security incident
- Protect your Middlebury credentials. Make sure that any online screen asking for your Middlebury credentials is legit. If unsure, please contact the ITS Helpdesk before you enter your credentials.
- Sensitive data requires extra safe handling. Never send sensitive information such as your SSN or other personally identifiable information via unencrypted email. If you need to share sensitive information with someone, make sure that you are using a secure sharing method and that you share the information with the right person. If you are unsure, please contact the ITS Helpdesk before you try to share sensitive information.
- Pay close attention to External Sender warnings in email and be extra careful with messages claiming to be from a Middlebury person, yet are not sent from an @middlebury.edu email address. Email phishing scams are always sent from external email addresses. If you are unsure, please contact the ITS Helpdesk before you respond to the email.
- Don’t visit dodgy websites on your Middlebury computer. This will help you avoid “drive-by downloads” of malicious and/or unwanted software, which can adversely affect the performance of your computer, or worse. If it happens, please don’t ignore it. Contact the ITS Helpdesk and we will help you remove the unwanted software.
- Always check with the ITS Helpdesk before installing any new software on your Middlebury computer. We will make sure that the software is safe and will note any potential conflicts that might arise with our standard Middlebury computer configuration.
- Learn more about cybersecurity in Oracle Learning Cloud (OLC) or Safe Colleges. Cybersecurity awareness training is an annual requirement for all employees and highly recommended for students, as well.
Lastly, remember that ITS is here to help you! Please do not hesitate to reach out to us with your information security needs or other technology questions and we will guide you to a clear and safe path.
Middlebury Information Security: firstname.lastname@example.org
Middlebury Technology Helpdesk: email@example.com
Information Technology Services
Davis Family Library 202
Middlebury, VT 05753