Security Training Dashboard

Are you looking for required training on cybersecurity or phishing? You may have received an email notifying you of enrollment in a short security training course. The email was sent from the security@bsu.edu account with a link beginning with "h**ps://bsu.ws01-securityeducation.com." This is a legitimate email from our third-party training provider, ZenGuide.

If you no longer have access to the enrollment or reminder email, please contact us at security@bsu.edu, and we can issue you an email with the link specific to your training. 

The Office of Information Security Services is responsible for the confidentiality, integrity, and availability of all information assets at Ball State University.

Our office is responsible for managing University technology policies and procedures, including what to do in the event of a security breach or how to dispose of confidential information. We also provide you with the information you need to protect your personal or work computer.

You can also find us on Facebook and Twitter.

Cybersecurity Awareness

Ball State University monitors the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and wants to keep you safe.  Please review and follow the following:

  • Be on the lookout for suspicious emails. As reported by the CISA, more than 90 percent of cyberattacks start with phishing emails. These emails appear legitimate but attempt to trick the recipient into actions such as (1) buying a gift card or changing a direct bank deposit, (2) opening documents or attachments that contain malware, (3) visiting a malicious website and entering their password. If you receive an email that looks suspicious, please forward it to security@bsu.edu and do not click the links or open the attachments until you receive confirmation it is safe. You may also contact the Technology Helpdesk for immediate assistance.
  • Be watchful for Phishing Emails re: Part Time Jobs. Phishing emails often request a quick response for a part time personal assistant, part time research job, virtual assistant, etc. and request that you send your personal information back to them via text message with the promise of payment.  These emails do not come from anyone affiliated or connected to Ball State University and should be regarded as fraudulent.
  • Protect your passwords. Using a different password for each service is one of the best ways to protect your accounts. If you use a password manager, be sure to set up two-factor authentication to guard your master password. Never use your Ball State University password for any other service.
  • Pay close attention to Duo Notifications: When you see a notification on your phone asking to confirm a login, do not click “approve” unless you are actively logging into a Ball State service. Please do not share your Ball State username and login with your parents and do not assume a DUO notification is your parent logging in. This is also a violation of the Information Technology Users’ Privileges and Responsibilities policy.  Also, if you should ever receive a call from someone asking for your six-digit DUO authentication code from the DUO mobile app, end the call immediately. Our support personnel will never ask you for this six-digit DUO code. More information is available at https://www.bsu.edu/twofactorhelp.
  • Report malware incidents: If you suspect you may have been victimized by malware, or if you suspect your password may have been stolen, reset your password at https://www.bsu.edu/password and then contact the Technology Helpdesk right away. You may report after-hours and weekend security incidents by calling 765-285-1517 and pressing option 4. Please report incidents right away
  • Lock digital devices when unattended. Manually lock your phone, laptop, or other devices when not in use. Don't walk away from a device you have logged into without locking it. Your phone or other devices also have a setting to lock it automatically after a period of inactivity. Take advantage of this feature by making the lock time as short as possible.  If you need additional information, you can check out this Technology Knowledge Base article: https://bsu.service-now.com/helpdesk?id=kb_article_view&sysparm_article=KB0017574
  • Keep your operating system anti-virus up-to-date. This will help protect against viruses, malware, and any other unwanted attacks.  Additional information is provided here: https://bsu.service-now.com/helpdesk?id=kb_article_view&sysparm_article=KB0015873

Passwords

Create & Manage

Passwords are a critical part of information and network security. They ensure the security and confidentiality of data that is stored on technology across campus.

To keep information secure, and to protect yourself from unauthorized access to your personal information and identity theft, you must create complex passwords and keep your password confidential.

Cyber security starts with you. You should protect your Ball State password in the same manner as your credit card or bank account numbers.

No legitimate university faculty, staff, or student will ever ask for your Ball State password.

People who desire to use your Ball State account maliciously will work hard to convince you that you must disclose it. Never reveal your password to anyone under any circumstances.

Helpful Resources

Suspicious Emails

Students and employees may sometimes receive emails asking for their Ball State password or other personal information. These requests are not legitimate. Please email us to report any of these suspicious emails to us.

Report an Email

Tips to create and maintain a secure password:

  • Never share your password with a friend, co-worker, or anyone, no matter how much you trust him or her.
  • Do not write down your password.
  • Do not use obvious choices like your birth date, spouse, boyfriend or girlfriend, pet name, your car make/model, or easily recognized words or phrases.
  • Do not use a keyboard sequence (asdfghjklasdfghj) or a number sequence (123456789012).
  • Do not use your favorite sport.
  • Do not reuse your passwords across multiple sites.