Skip to main content

Phishing??

 



We recently signed an agreement with a company called KnowBe4. They are an internet safety company that provides training resources, safety testing, and more. So far this year, we've done two phishing campaigns for all adult users of crpairie email. Phishing is a intrusive way that hackers try to access information into a system, so an email that may ask to verify a username and password, or one that provides a link to click that can compromise an email account. A big thank you to so many of you that have alerted the Technology Team of these emails. A bit of data for you, 

 
Less than 8% of users actually fell for the last phishing campaign. The fact that over 92% of users passed the test is tremendous! Our goal as we move forward is to continue to decrease the amount of testing failures through awareness and training. 

One of the tools that KnowBe4 provides is a phish alert button built into Gmail for Google Chrome. Later today, we will push that out to all adult users. As part of our ongoing efforts to increase security and mitigate email phishing, we will be installing a Phish Alert Button in our domain Gmail accounts.  Once the PAB add-in is installed, upon your next Chrome restart, you will be prompted with a message to "Allow" the KnowBe4 PAB app. Click the "Allow" button on this message.

This information below is about a short training module that will show you how to use the PAB. 


You will notice a new “Phish Alert Button” in your gmail client. Please click this button whenever you receive a suspicious or potentially dangerous email. Upon clicking, the email will be deleted from your inbox and forwarded to our Technology team for analysis.

Here is additional information about the Phish Alert Button that may be helpful:

Additionally, in the near future, you will be enrolled in “Phish Alert Button” training. The PAB training will teach you how to handle unsafe emails and help you to distinguish between spam, phishing, and spear-phishing emails.

Please keep an eye out and complete this training when it's assigned.   By using this new button, you will help us to keep our organization safe and defend against cyber attacks.




Comments

Popular posts from this blog

Passwords - oh passwords!

 We just recently sent this message to our staff:  Greetings! In our continuing efforts to create a more technology secure environment, we are going to begin to enforce the following rules for STAFF passwords in Google. All passwords must be a minimum length of 12 characters. We recommend passwords that are passphrases, for example “ilovechipsandsalsa”. While we are enforcing a password length requirement, at this time we are not requiring complexity through special characters, or symbols, or upper case letters. All staff will be required to create a new password every 180 days. We will begin enforcing these policies on Wednesday November 16th. When you log into your Google account, you will be prompted to update your password. A few other items regarding this change. Infinite Campus passwords will not be affected. Teacher MacBook logins, office staff’s windows logins, any business office/HR logins, or other website logins will not be affected. Para tablets, chromebooks, or ot...

Personal Device and Personal Accounts

  We have received some recent guidance regarding personal cell phone use from Matt Carver, Legal Council for School Administrators of Iowa that we felt would be beneficial to pass along to you. LINK TO ARTICLE (NOTE ARTICLE IS ON PAGE 4). Please know that although this article is directed toward school administrators, it applies to ALL school employees .  One key point that I want to reiterate is this paragraph below:  "Does this mean that all communications between school employees or representatives are subject to public records requests? NO. Again, consider if the communication is about official business. If the communication does not relate to the employee or board member carrying out their official duties or making a decision about the school district, a student, or another employee, then it is unlikely the communication is subject to a request. Remember that public employees have constitutionally protected rights to speak on matters of public concern in their pe...

Network updates

  Greetings Prairie Hawks, We’d like to notify you of some upcoming network security updates. Our department is continuing to update security practices and this upcoming change will be a major revision to our current system. Beginning Jan 3rd, 2022 we will be adding a 2nd wifi network (SSID). Currently, devices connect to the open wifi network ‘CCSD’. This new network will be for our staff and student devices only. Our end goal is to have a network specifically for school provided devices and a guest network. To that end we will not be broadcasting or providing credentials for our new production network. Rather, we will be deploying these credentials through our various device management systems.  What does this mean for you…. On and after January 3rd, the district owned and managed devices will be instructed to connect automatically to this new network. Beginning Jan 17th, (clerical day) we will be retiring the CCSD network and moving to a new CCSD-Guest network. This will be...