Updated Cyber Security Requirements

New Cyber Security Requirements

As you surely have seen in the news or in your personal life recently, cyber attacks continue to develop and increase in frequency and complexity.  Many organizations - including major technology and social media companies - are taking additional steps to ensure that the accounts of their employees and customers remain well-protected.  Manhattan College has not been immune to these attacks and associated risks and we are now being required to implement stricter controls for our community members who access institutional data.  Given this new reality, two specific requirements that we must meet are as follows:

• All Employees must complete a yearly Cyber Security training program (More information will be coming about this shortly. This must be completed by January 21st, 2022)

• All Employees must enroll their JasperNet account in Multi-Factor Authentication (MFA or 2SV) (Must be enrolled by January 18th or you will be auto-enrolled)

MFA Support Sessions

ITS will be offering support sessions with members from the Technology Training team for those who will need to enable DUO Multi-Factor Authentication on their JasperNet accounts. Below please find more information about the drop-in training sessions. There is no signup required.

When:

• January: 5th, 12th, 18th, and 19th from 11:00am-2:00pm

Where: MGL 305 (Computer Lab)

Please remember to bring your cell phone to complete the setup.

If you are unable to attend or have any questions please contact its@mahattan.edu and someone from the Training Team will reach out to schedule a separate time and answer any questions you may have.

DUO MFA Support Sessions

ITS will be offering support sessions with members from the Technology Training team for those who will need to enable DUO Multi-Factor Authentication on their JasperNet accounts. Below please find more information about the drop-in training sessions. There is no signup required.

When:

• December: 1st, 8th, 15th, and 22nd (all Wednesday’s) from 11:00am - 2:00pm
  
  
• January: 5th, 12th, and 19th (all Wednesday’s) from 11:00am-2:00pm

Where: MGL 305 (Computer Lab)

Please remember to bring your cell phone to complete the setup.

For more information on why this is needed please refer to this post.

If you are unable to attend or have any questions please contact its@mahattan.edu and someone from the Training Team will reach out to schedule a separate time and answer any questions you may have.

New Cyber Security Requirements

As you surely have seen in the news or in your personal life recently, cyber attacks continue to develop and increase in frequency and complexity.  Many organizations - including major technology and social media companies - are taking additional steps to ensure that the accounts of their employees and customers remain well-protected.  Manhattan College has not been immune to these attacks and associated risks and we are now being required to implement stricter controls for our community members who access institutional data.  Given this new reality, two specific requirements that we must meet are as follows:

• All Employees must complete a yearly Cyber Security training program (More information will be coming about this shortly. This must be completed by January 21, 2022)

• All Employees must enroll their JasperNet account in Multi-Factor Authentication (MFA or 2SV) (Must be completed by January 18th, 2022 or you will be auto-enrolled)

Cyber Security Training

ITS is actively working with our insurance provider to develop a yearly Cyber Security training program that must be completed on a yearly basis starting in January 2022.  More information about the cyber security training program will be made available in the new year and must be completed by December 31st each year.  Content for the initial training program will be delivered by our insurance provider, however, we will assess the program throughout the year and provide the opportunity for campus experts to participate in determining and developing the curriculum for following years in alignment with the same requirements of the insurance provider.  ALL employees (including Faculty, Graduate Assistants, and Student Employees) will be required to complete this course yearly.

Multi-Factor Authentication

Multi-Factor Authentication (MFA) - sometimes referred to as Two-Step Verification (2SV) - will be required for all employees going forward and must be implemented no later than January 2022.  While Manhattan College has previously taken a very targeted and calculated approach to require MFA based on a “risk score” (i.e. users that access Banner or other escalated access), we must now require MFA for ALL employees (including Faculty, Graduate Assistants, and Student Employees).  To date, over 670 community members have already enrolled in MFA.  ITS will be contacting community members that still need to enroll in MFA in the coming days to provide instructions and support for enabling MFA by 1/18/2022.

MFA Support Sessions

ITS will be offering support sessions with members from the Technology Training team for those who will need to enable DUO Multi-Factor Authentication on their JasperNet accounts. Below please find more information about the drop-in training sessions. There is no signup required.

When:

• January: 12th, 18th, and 19th (all Wednesday’s) from 11:00am-2:00pm

Where: MGL 305 (Computer Lab)

Please remember to bring your cell phone to complete the setup.

If you are unable to attend or have any questions please contact its@mahattan.edu and someone from the Training Team will reach out to schedule a separate time and answer any questions you may have.

MFA updated to extend "Remember Me" for most JasperNet Services

ITS is happy to announce that the MFA requirement has been updated to to extend "Remember Me" for most JasperNet services! 🎉

You may now choose to select "Remember Me for 30 Days" for services such as: your MC email account, Banner Self Service, Banner Workflow, and Degreeworks. This means that you will only have to authenticate when logging in once every 30 days! JasperNet services with access to sensitive data such a Banner will be the only services that require you to authenticate with each login.

Banner Users: MFA now REQUIRED to access Banner and related services

As of Monday 2/24, MFA is now REQUIRED when accessing Banner and related services.  All services that require MFA are now identified by an MFA-Lock icon on the Banner main page.

To enable DUO MFA on your JasperNet account, start by installing the DUO Mobile App and follow the instructions for configuring MFA on your JasperNet Account. 

ITS will be holding a drop-in support session in DLS 309 from 8AM-11AM for Banner users who have not yet enabled MFA on their JasperNet account.

Starting March 1st, a VPN connection will no longer be required to access Banner from off-campus!

DUO Users: You can now use DUO MFA with Facebook!

Manhattan College has deployed DUO Multi-Factor Authentication (MFA) to protect the JasperNet account of users who access sensitive data.  The same DUO Mobile App can now be used to protect your Facebook account as well!


To enable DUO MFA on your Facebook account, start by installing the DUO Mobile App and configuring MFA on your JasperNet Account. 

Once your JasperNet account has been configured to use the DUO App, follow the instructions for Facebook.

Access DUO MFA with your Apple Watch

Users who have enabled DUO MFA on their JasperNet Account may now use their Apple Watch to respond to Multi-Factor Authentication requests!  Contact ITS to learn more!!

Duo Mobile and Apple Watch - Guide to Two-Factor Authentication · Duo Security

Duo Push

When you receive a push notification, you'll also see the notification on your paired Apple Watch if your phone is locked. Apple Watch’s Taptic Engine is a linear actuator inside the device that produces haptic feedback, meaning it literally taps you on the wrist whenever you receive an alert or notification. That means you’ll also feel a tap whenever a login request is sent via Duo Mobile, letting you quickly log in or deny the request.

You can approve the login or deny the login request without ever touching your phone.

You'll only see the Duo request on your watch when your phone is locked. Notifications won't go to your Apple Watch when your phone is unlocked.

Passcodes

You can also generate passcodes from the Duo Apple Watch app. Simply launch the app from the watch and tap an account to generate a passcode for that account.

Safer Internet Day: Political Campaigns Enable MFA

Teaming up with Defending Digital Campaigns on election security

Today is Safer Internet Day and [Google is] announcing a new partnership with Defending Digital Campaigns to provide federal campaigns access to free Titan Security Keys, the strongest form of two-factor authentication. Last year, the Federal Elections Commission granted special approval for DDC to offer cybersecurity services to presidential and congressional campaigns. 

Read the full post

Reposted from Google Safety and Security blog:

https://blog.google/technology/safety-security/defending-digital-campaigns-election-security

Reminder: Enable Push Notification for Duo

As the Multifactor Authentication app, Duo, begins to make its way to the Manhattan College community, we would like to offer a helpful tip for getting started! 

In order to get started, it is necessary to download the "Duo Mobile" app. Once you have downloaded the app and open it, the app will prompt you to allow "Push Notifications". It is important that you allow your phone to receive these notifications. Enabling these notifications will allow you to have a quick and secure sign on process!

If you are not sure how to turn on these notification, please reference our knowledge base article on how to enable push notifications on your phone. 

Multi-Factor Authentication (MFA) coming soon to replace VPN requirement

Over the course of the spring semester, ITS will be enabling Multi-Factor Authentication (MFA) on key campus services that are currently only available on campus - or via VPN when off-campus.  Once MFA has been fully deployed, users will no longer be required to connect to a VPN in order to access these services.

ITS will be holding drop-in support sessions to assist users in the MFA opt-in process. 
All you’ll need is a smart phone or mobile device and a few minutes to complete registration and opt-in. 
Be on the lookout for invitations via email for future support sessions.

How to setup MFA