Janet Eaton, ITS Information Assurance

Janet Eaton, ITS Information Assurance

Contact Janet at jmfeaton@umich.edu.

New UMICH password strength requirements

Next time you change or reset your UMICH (Level-1) password, you will need to meet new password strength requirements. Existing passwords are not affected by the new requirements and can remain as is. The new requirements align with current best practices and National Institute of Standards and Technology (NIST) guidelines for passwords. Given the sophistication of attempted attacks… Read More »

Duo for U-M VPN now available

You can now use Duo two-factor protection with the U-M Virtual Private Network (VPN). With faculty, staff, and students already benefiting from Duo two-factor authentication at Weblogin, ITS is working to further extend this protection to other university services. Try it now on your personal computer Visit ITS: Getting Started With VPN and choose your operating system to… Read More »

Increase in emails impersonating U-M deans and other employees

ITS Information Assurance is seeing an increase in fraudulent emails that appear to come from U-M deans, employees and offices. These fraudulent emails use a practice known as “spoofing.” Different versions of these emails ask the recipient to: Quickly arrange for gift cards to cover a university expense Reply if you are available Make an immediate wire transfer… Read More »

Write emails that don’t look phishy

Given the current infodemic related to the COVID-19 pandemic, it is harder than ever to get your important university information through to the people who need it. People are rightfully suspicious of unsolicited email, but that can sometimes cause them to ignore or delete your important, legitimate communications. Focus on helping recipients verify the legitimacy of your U-M… Read More »

Vulnerability scans now monthly, adding internal scans

To better help you secure your unit networks, ITS Information Assurance (IA) is increasing the frequency of its universitywide scans and adding internal network scanning. As of May, universitywide vulnerability scans are now performed monthly instead of quarterly. The monthly scans will be similar to previous quarterly scans. The software begins by performing a TCP and UDP probe… Read More »

New Safe Computing resources promote remote IT security

ITS Information Assurance has rapidly developed a number of new Safe Computing resources to help you practice and promote good IT security and privacy practices in this new normal: New on Safe Computing and in IT Security at U-M. New resources covering videoconferencing security and privacy, coronavirus scams, how to prevent Zoombombing, new videos, new entries in the… Read More »

Fraud alert: Tax season extension, coronavirus stimulus payments

Watch for tax fraud during extended tax season With tax filing deadlines extended from April 15 to July 15, the risk of tax fraud is extended as well. Be alert for fraudulent phone calls and emails from scammers pretending to represent the IRS. See Safe Computing: Beware of Tax Fraud for examples and more information. Watch for scams… Read More »

Data protection course for use in your unit

How can you help people in your unit become aware of their basic data protection responsibilities? Encourage them to take this new, university-focused online course from ITS Information Assurance: DCE101 U-M Data Protection and Responsible Use (in My LINC). The completely new course provides practical guidance and best practices. It replaces what used to be called “DCE101: Access… Read More »

Privacy@Michigan speakers call for more privacy protection

Faculty, staff, and students gathered for a half-day of privacy related speakers and panels at Privacy@Michigan January 28 at the Rackham Building on the UM-Ann Arbor campus. Privacy@Michigan is an annual event hosted by ITS Information Assurance and the U-M School of Information in recognition of Data Privacy Day. If you missed it, you can watch the recordings… Read More »

Safe Computing is “Best of the Web!”

Safe Computing took the top spot as winner of the Multi-State Information Sharing and Analysis Center (MS-ISAC) Best of the Web Contest for 2019 in the “Education” category.  According to MS-ISAC, “The goal of this contest is to recognize commendable sites and highlight them as best practices for others to consider when developing or redesigning their own sites.”… Read More »

Not using Bluetooth or AirDrop? Turn them off!

Turn off Bluetooth and other connections when you aren’t using them, and limit access to your devices via Mac/iOS AirDrop. This helps you save your battery charge and protects you from unwanted material. Subway riders in New York City, for example, have reported receiving unsolicited nude images over open AirDrop connections. Members of the U-M community have reported… Read More »

Plan to attend “What Does Big Tech Owe Us?” March 18

Wallace House—along with co-sponsors ITS and the Dissonance Event Series—will present Recode’s Kara Swisher interviewing Alex Stamos live on stage at U-M’s Hill Auditorium on March 18, 2020, at 6:30 p.m. Save the date on your calendar now. Kara Swisher is co-founder and executive editor of Recode and host of the weekly interview podcast “Recode Decode.” She is… Read More »

NYT editor Kathleen Kingsbury to speak at Privacy@Michigan

Celebrate Data Privacy Day on January 28 by attending the Privacy@Michigan symposium. Kathleen Kingsbury, editor of The New York Times Privacy Project, will give the keynote address. Additional privacy experts, to be announced in January, will participate in two panel discussions: It Takes a Village: Multi-Disciplinary Voices on Privacy and Ethics in a Hyper-Connected Age  I Always Feel… Read More »

Svetla Sytch named assistant director of privacy and IT policy

Svetla Sytch joined ITS Information Assurance (IA) as assistant director of privacy and IT policy on November 25. In this role, she will work with partners across the university to craft strategies and lead operational efforts that weave privacy, policy, and data governance into the way the university engages in its teaching, learning, research and administrative activities. “Svetla… Read More »

Expect privacy notice updates as the CCPA takes effect

On January 1, 2020, the California Consumer Privacy Act (CCPA) goes into effect. As we near that date, be aware that you are likely to start seeing updates and changes to privacy notices and policies for both personal and university online services (such at U-M Google and Box). Any communications about updates to vendor privacy policies and notices… Read More »

SUMIT_2019 recap: AI & cameras, art, and Apple watches

SUMIT_2019 brought together more than 430 people from the university and across southeast Michigan on October 29 to explore diverse topics in privacy and IT security. The presenters shared their work and insights on the socio-technical aspects of AI and cameras, art that explores privacy and security challenged as a result of living in our modern networked world,… Read More »

Duo to be required for U-M VPN

Over the next few months, a more secure connection method for the U-M Virtual Private Network (VPN) will be introduced, and the current method will be retired. The new method will direct people to Weblogin, and two-factor authentication using Duo will be required. The addition of two-factor to the U-M VPN login will improve security for U-M networks.… Read More »

Update: Chegg password incident resolved

The public release of credentials (email addresses and associated passwords) related to the 2018 Chegg breach unfortunately affected the U-M community. Thank you to those of you who assisted students and others whose UMICH passwords were reset in late September as a result of reuse at U-M of passwords exposed in a data breach at Chegg, a commercial… Read More »