[Plantsci] FW: Stay Secure - Be Wary of COVID-19 Scams

Tue Mar 24 10:41:28 MST 2020

Mario A. Marquez
Systems Administrator Principal
University of Arizona
College of Agriculture and Life Sciences
School of  Plant Sciences
http://www.splshelp.arizona.edu<http://www.splshelp.arizona.edu/>
marquezm at email.arizona.edu<mailto:marquezm at email.arizona.edu>
Office 520-621-1257
Cell 520-429-2902
[UAriz-CALS-logo-247]

From: iso-risk-managers-request at list.arizona.edu <iso-risk-managers-request at list.arizona.edu> On Behalf Of ISO-MAIN
Sent: Tuesday, March 24, 2020 10:18 AM
To: itdirectorscouncil at list.arizona.edu; itsecmgrs at list.arizona.edu; iso-risk-managers at list.arizona.edu; netmgrs at list.arizona.edu
Cc: ISO-MAIN <security at email.arizona.edu>
Subject: [iso-risk-managers] Stay Secure - Be Wary of COVID-19 Scams

Good morning,
COVID Scams continue to make their way through our campus, and with this new environment, it is important to share safe computing tips.  Please share the following information with your departments as appropriate.  Also attached, you will find a graphic that could be used in departmental newsletters or emails.

Be Wary of COVID-19 Scams
New scams continue to arise around the COVID-19 virus. Stay alert, particularly for:

  *   Phishing Emails.
     *   Recent attempts offer governmental financial support and attempt to gather personal information including your SS number
     *   Messages promise personal COVID-19 test kits but have a malware attachment.
  *   False Websites. Scammers can prey on fears or make sensational claims.
  *   Illegitimate Charities/Donation Campaigns. Only donate to known, reputable charities.
Search for verified information on your own from sources like https://www.cdc.gov/coronavirus/2019-nCoV/index.html and major news outlets. Local resources for COVID information can be found at https://www.bannerhealth.com/patients/patient-resources/covid-19.
Remote Work Cybersecurity
Working remotely also brings about new nuances that might not have been considered in your or your staff's normal business practices. Here are a few things to keep in mind around safe computing in a remote environment:
Data Classification
As information sharing changes, make sure you use the appropriate technologies for the classification of data you handle (Regulated, Confidential, Internal, Public). See the Data Classification and Handling Standard: https://security.arizona.edu/content/data-classification-and-handling-standard.

  *   Check with the appropriate Compliance Partner for which technologies can be used with Regulated Information: https://compliance.arizona.edu/compliance-partners.
  *   HIPAA compliance information is available at: https://research.arizona.edu/communicating-health-information-online.

Conference Call Meetings
Many campus units are using Zoom as a means to stay connected for meetings and other social interactions. Add protections to your meetings to ensure they're not interrupted by unwanted participants.

  1.  Password protect meetings and securely share the password with participants
  2.  Enable a waiting room so that you grant access as people enter the meeting (not practical when you expect a large number of participants)
  3.  Use the Only Host Can Share their Screen setting
  4.  Turn off Allow Removed Participants to Rejoin

Home Computer Security
All computers used for University business should have a screen lock and be protected by antivirus/anti-malware. Remote staff who are using their personal computers to do work are eligible to install Sophos Home Premium. Learn more at: https://softwarelicense.arizona.edu/sophos-central.
It is recommended to do the following:

1.      Apply all Updates for Operating System and other Software

2.      Use VPN to connect securely to campus

3.      Utilize approved cloud storage instead of your local hard drive (protects from ransomware and other malware accessing documents)

For more information or to report a phish, visit https://security.arizona.edu/

[cid:image001.png at 01D601C2.FD934A60]
Information Security Office
THE UNIVERSITY OF ARIZONA

Computer Center
PO Box 210073 | Tucson, AZ 85721

security.arizona.edu<https://security.arizona.edu/>
facebook<https://www.facebook.com/UArizonaInfoTech/> | twitter<https://twitter.com/UaInfotech> | instagram<https://www.instagram.com/uainfotech/> | linkedin<https://www.linkedin.com/school/the-university-of-arizona>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20200324/a03e3123/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 11082 bytes
Desc: image001.png
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20200324/a03e3123/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 3743 bytes
Desc: image003.png
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20200324/a03e3123/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ISO Infographic-1 v4.pdf
Type: application/pdf
Size: 2553699 bytes
Desc: ISO Infographic-1 v4.pdf
URL: <https://list.cals.arizona.edu/pipermail/plantsci/attachments/20200324/a03e3123/attachment.pdf>