Security, Security Awareness Training Overview
The University of Illinois is now implementing a cloud hosted security education platform called Proofpoint Security Awareness Training.
We’ve partnered with Proofpoint (formerly Wombat Security) to provide security awareness training. Their platform provides security assessment tools, online security awareness training, additional outreach material, and much more. This article explains the initial goals of the program and answers some basic questions about how it will be used at the university of Illinois Champaign-Urbana, University of Illinois Springfield, and University Administration. The goal of this program is to educate users about current cyber security threats that they may face both at work and at home.
What to Expect:
Phase 1 – The first phase will consist of a CyberStrength Assessment that will ask a variety of questions designed to gauge your understanding of cybersecurity topics. This assessment should take no longer than 20 minutes, and we ask that you complete it within 30 days of the assignment date. This message will appear as the following:
From Name: Security Awareness TrainingFrom Address: firstname.lastname@example.org OR email@example.com
Subject: You have been assigned a CyberStrength AssessmentYou will be prompted to visit https://uillinois.wombatsecurity.com/ to complete the assessment.
Phase 2 – The second phase will include the assignment of security training modules that are designed to educate about security best practices such as avoiding phishing emails and staying safe on the web. This training will be rolling out in January 2020 and will be based on any security weak points identified in phase 1. This training will be open for 60 days from the starting date. Stay tuned for more info.
Phase 3 – This phase covers the continuous development and training that will be offered through the Security Awareness Training platform in the 2020 calendar year. Moving into the future, we hope to offer useful and meaningful training that is tailored to meet your specific needs such as travel or mobile device security. This is an ongoing program that we appreciate feedback for as we are rolling out.
Who does this apply to?
All faculty and staff should be enrolled in the program and receive emails about new training and assessments. Contact firstname.lastname@example.org if you're not sure whether it applies to you or not.
Am I required to participate in Security Awareness Training?
Currently, the Security Awareness Training is optional for both phase 1 and 2 but is strongly encouraged. We are all at risk, not just at work, but in our personal lives as well. The best defense is for all of us to understand how we can protect ourselves.
I am seeing the log in screen for Proofpoint(Wombat) (pictured below)
This is not the correct log in page and may be due to visiting a different "wombatsecurity" domain. Directly going to the official link https://uillinois.wombatsecurity.com/ will instead direct you to the campus sign-on (pictured below) where you can authenticate with your University of Illinois credentials.
After logging in to the platform, I am seeing a blank page which states "You are not currently enrolled in any training assignments"
This may be due to authenticating to the wrong campus (users with accounts across multiple campuses were chosen a single campus to have the training assigned to). When logging in, please choose the campus corresponding to the email the training notifications were sent to (example: @illinois.edu would choose University of Illinois at Urbana-Champaign). If you are still seeing this page when logging in, please reach out to email@example.com.
What is a CyberStrength Assessment?
A Cyberstrength assessment is an online security quiz which covers a broad range of security topics and is used to gauge your understanding of different cybersecurity topics. This assessment will be used to determine which areas of security are most important for our campuses and will solely be used for tracking purposes.
What if I received a bad score on the Assessment?
The assessment score does not have any weight and is only used to see where users are at in their cybersecurity knowledge. Some of the questions are intentionally difficult in order to make users think about the answers.
Can I use the Proofpoint Security Awareness Platform in my classroom or other places outside the University?
Unfortunately, our license with the vendor is currently limited to Faculty and Staff for the Springfield, Urbana-Champaign, and System Office campuses.
Who to contact with questions?
Please reach out to the security office at firstname.lastname@example.org with any questions or feedback about the program.