The development of the security awareness concept focuses on raising awareness of the topic of information security. Through various target group-oriented measures, employees will learn how to recognize and report unwanted actions and help to protect the university.
HITS IS offers a selection of different measures or advises on them. The offer is based on findings from the other HITS IS areas and feedback from the universities.
The current status of the information security awareness measures at one's own university is recorded in advance by means of a questionnaire. In the joint workshop, the expectations of the security awareness concept will be discussed and defined with each other. The time required for this workshop is approx. 1/2 day. The HITS IS team will then develop a proposal with suitable measures and recommendations for external service providers. If required, HITS IS will provide awareness material.
Scope of Services and Service Specifics
- Recording of the current status of awareness measures
- Workshop with university leaders to define scope and expectations
- Defining the framework conditions
- Target groups
- Main topics
- Desired methods
- Schedule
- Defining the framework conditions
- Proposal for measures and summary of a university-specific concept
- Provide material for the implementation of the measures
Service Parameters
Basic service (information platform):
HITS IS provides materials and information on awareness.
- List of publicly available materials
- List of e-learning and phishing simulation providers
- Blog Articles
Workshop Option 1:
HITS IS provides available materials from the university and carries out simple adaptations to local requirements:
- PowerPoint slides for classroom training
- Elaborated stations for "circuit training" with module descriptions, instructions for evaluation and sample solutions, if necessary
- Secure password
- Suspicious URLs
- Phishing
- Dealing with passwords
- Clean Desk
- Scenarios for live hacking with module descriptions
- Booting USB
- HW-Keylogger
- Passwords
- Phishing
- Public WLAN
- Bad USB
Workshop Option 2:
HITS IS develops adapted materials for the university. These can include the following materials:
- Poster templates (printed at the university)
- Text contributions for the university website
- Your own explanatory videos
- etc.
After ordering the workshops, they can be carried out within two weeks.
Requirements
- Contact person for information security awareness
- Collaboration in the development of the concept
- Local workshop organization (invitation of local people, meeting room, catering on site)
User / Customers
This service is made available to the following categories of users.
| User class | Note |
|---|---|
| (1), (2) | only for members of the Digital Network of Bavaria |
| (3), (4), (5), (6) | not available for these customers |
The service can be requested by the CIO, CISO, ISB, RZ management or the head of the human resources department of the universities in the digital network via e-mail to informationssicherheit@remove-this.digitalverbund.bayern .