Cyber Security

Security of Personal Information
Students should be aware that not all Internet sites are secure. If students choose to transmit personal information such as credit card numbers or social security numbers while using Vernon College’s telecommunications facilities, they do so at their own risk. Vernon College cannot be responsible for any problems that occur.

Vernon College Cyber Security Policy

Security is a high priority in the Vernon College (VC) system. Any user who identifies a cyber security problem is required to report it immediately to the Cyber Security Officer. Students should never share cyber security problems to any person outside of Information Technology.

The IT department has the authority to examine all Vernon College owned computers at any time to check for inappropriate use. This includes unauthorized software or programs, inappropriate websites, inappropriate use of email, storage of inappropriate material, or any other use not authorized by Vernon College. In order to maintain network security, the College reserves the right to:
a. Limit, restrict, or terminate an account holder’s usage;
b. At any time to inspect, copy, remove, or otherwise alter any data, file, or system that threatens the security of that system or the network, with or without prior notice to the user;
c. Periodically check the systems and take any other such actions necessary to protect the College’s computers, information, and networks.

Protect Personal and College Devices
By using their digital devices to access college emails or accounts, students introduce security risks to Vernon College data. Vernon College students must keep both their personal and college-issued computer, tablet, and cell phones secure. They can do this by doing the following:

Keep hardware and software secure
Choose and upgrade a complete antivirus software.
Do not leave devices exposed or unattended.
Keep all devices password protected.
Install security updates of browsers and systems monthly or as soon as updates are available.
Log into college accounts and systems through secure and private networks only.
Avoid accessing internal systems and accounts from other people’s devices or lending their own devices to others.

Keep Emails Safe
Emails often host scams and malicious software (e.g. worms). To avoid virus infection or data theft, Vernon College instructs students to:

Avoid opening attachments and clicking on links when the content is not adequately explained (e.g. “watch this video, it’s amazing”).
Be suspicious of clickbait titles (e.g. offering prizes, advice).
Check email and names of senders to ensure they are legitimate.
Look for inconsistencies or giveaways (e.g. grammar mistakes, capital letters, excessive number of exclamation marks).
If a student is not sure that an email they received is safe, they can refer to the Vernon College Cyber Security Officer for instructions.
 
Manage Passwords Properly
Password leaks are dangerous since they can compromise Vernon College’s entire digital infrastructure. Passwords should be secure and secret to avoid hacking. For this reason, Vernon College students must:
Choose passwords with at least eight characters (including capital and lower-case letters, numbers and symbols) and avoid information that can be easily guessed (e.g. birthdays).
Remember passwords instead of writing them down. If students need to write their passwords, they are obliged to keep the paper or digital document confidential and destroy it when their work is done.
Exchange credentials only when absolutely necessary. When exchanging them in- person is not possible, students should utilize the phone instead of email, and only if they personally recognize the person they are talking to.
Change passwords every six months.

Transfer Data Securely
Transferring data introduces security risks. Students must:
Avoid transferring sensitive data (e.g. customer information, student records) to other devices or accounts unless absolutely necessary. When mass transfer of such data is needed, Vernon College requests students ask Run Business Solutions for help.
Share confidential data over the college network/ system and not over public Wi-Fi or private connection.
Ensure that the recipients of the data are properly authorized people or organizations and have adequate security policies.

Security Breach Measures
Other measures will be used in case of a suspected breach. Students must:
Report scams, privacy breaches and hacking attempts to the Cyber Security Officer. The Vernon College Cyber Security Officer needs to know about scams, breaches and malware to better protect Vernon College’s digital infrastructure. For this reason, Vernon College advises students to report perceived attacks, suspicious emails, or phishing attempts as soon as possible to Vernon College specialists.
The Vernon College Cyber Security Officer must promptly investigate, resolve the issue, and send a college-wide alert when necessary.

The Vernon College Cyber Security Officer is responsible for advising students on how to detect scam emails. Vernon College encourages students to reach out to the Cyber Security Officer with any questions or concerns. The Cyber Security Officer will be listed on the VC “Cyber Security” webpage.

Additional Measures
To reduce the likelihood of security breaches, Vernon College students must:
Turn off their screens and lock their devices when leaving their areas.
Report stolen or damaged equipment as soon as possible to Run Business Solutions.
Change all account passwords at once when a device is stolen.
Report a perceived threat or possible security breach of college systems.
Refrain from downloading suspicious, unauthorized or illegal software on the college equipment or network.
Avoid accessing suspicious websites.
Vernon College students must comply with Vernon College social media and internet usage policy.

Disciplinary Action

Vernon College expects all VC students to always follow this policy, and those who are responsible for security breaches may face disciplinary action:

First-time, unintentional, small-scale security breach: Vernon College may issue a verbal warning and train the student on security.

Intentional, repeated or large scale breaches (which cause severe financial or other damage): Vernon College will invoke more severe disciplinary action up to and including expulsion.

Vernon College will examine each incident on a case-by-case basis.

Additionally, students who are observed to disregard Vernon College’s security instructions will face progressive discipline, even if their behavior has not resulted in a security breach.