Archive for 2023

Information Security Scholarship Opportunities - Applications Begin January 15, 2024

by in , , , ,

CSUCI Information Technology Services would like to bring attention to a great opportunity for students looking for scholarship opportunities in the field of Information Security.

ISC2 Scholarships

Educating Future Information Security Professionals

The International Information System Security Certification Consortium (ISC2) and its Center for Cyber Safety and Education are deeply committed to encouraging and supporting students pursuing a degree focusing on cybersecurity, information assurance, or similar fields. The scholarships, sponsored by ISC2, support students globally. Efforts like these can lead students to long-term career success in a rewarding and critically important field. The scholarships are part of an effort to bridge the cybersecurity workforce gap—which stands at 3.4 million needed professionals—by providing future cybersecurity professionals across the globe with scholarships to prepare them for a rewarding career in this important field.  

Find more information about all the scholarships at https://www.iamcybersafe.org/s/scholarships.


December 18th, 2023 - Windows Updates

by in , ,

Dear CSUCI Community,

Beginning December 18, 2023, CSUCI computers will undergo a Windows update using a new tool introduced by ITS. This update includes all the Security and Quality updates that would normally be deployed as required but will now include the latest Windows feature update and essential system improvements.  Due to the additional functionality, the first update will potentially be longer than a traditional update and it is essential that the update completes once started before shutting down your system.  These updates will apply only to Windows computers.

Key Information:

  • Start Date: December 18, 2023
  • Updates: Newest Windows feature update and required patches
  • Restart Required: After updates, a restart is necessary (may take up to one hour)

User Options:

  • Notification: You will be notified before the restart.
  • Restart Time: Choose a time or allow an automatic restart.
  • Suggestion: Consider restarting as you leave for the day.

Questions or Concerns: For any inquiries, please contact the Solution Center at 805-437-8552.

Thank you for your cooperation.

Best regards,

ITS (Information Technology Services)

Information Security Careers: Empowering Local High School Students to pursue Information Security Careers

by in , , , ,

CSUCI Information Technology Services (Jim August and Carlos Miranda) recently enjoyed conducting engaging hour-long in-person and virtual presentations at Pacifica High School and Camarillo High School titled "Info Sec Careers: Why you are needed and why you can do them!"



During the sessions, we delved into the world of information security, discussing the importance of these careers and highlighting the opportunities available to students from all backgrounds. We aimed to inspire the students by emphasizing the demand for these roles and their capability to excel in this field. Information Security needs women, minorities, and other candidates from diverse backgrounds for good-paying jobs.

Key Highlights

Understanding Information Security: We provided an overview of information security, its significance in today's digital landscape, and its crucial role in safeguarding data.

Education: Graduating High School Students can look at going to CSUCI for majors such as Information Technology and Computer Science and, coming soon, a Master’s Degree in Cybersecurity. 

Career Pathways: Exploring various career paths within information security, we showcased the diversity of roles available, ranging from ethical hacking to cybersecurity analysis and beyond.

Certifications: Our goal was to empower the students by emphasizing that these careers are not only in demand but also accessible with dedication, passion, and continuous learning. The session provides an overview of the different Information Security professional certifications and the skills needed to attain them. 

Interactive Session: We engaged the students through interactive discussions, answering their questions and encouraging them to consider the diverse opportunities within information security.

We hope our session sparked interest and curiosity among the students about the exciting world of information security, inspiring them to consider a career path in this ever-evolving and crucial field.

A huge thanks to Pacifica and Camarillo High School for the opportunity to connect and share insights into the world of information security careers!


Internships, Careers with the FBI Cybersecurity Awareness Month Session

by in , , , , , ,

cybersecurity month 2023 logo

On Friday October 20, 2023, as part of Cybersecurity Awareness Month (CSAM) CSUCI had 4 members of L.A.’s F.B.I. Division on campus for a session about "Internships, Careers with the FBI". This session/webinar provided valuable insights into opportunities for individuals interested in working for the Federal Bureau of Investigation (FBI). The session covered the following key points:

1. Introduction to the FBI

An overview of the FBI's mission, which is to protect and defend the United States against terrorist and foreign intelligence threats, uphold and enforce the criminal laws of the United States, and provide leadership and criminal justice services to federal, state, municipal, and international partners.

2. Internship Programs

  • The FBI offers a variety of internship programs for undergraduate and graduate students.
  • Interns can gain experience in areas such as cybersecurity, intelligence analysis, criminal investigation, and more.
  • These internships provide a valuable opportunity to work alongside experienced professionals and contribute to the FBI's mission.

3. Entry-Level Careers

  • The FBI recruits individuals with diverse backgrounds and skills, including law enforcement, intelligence analysis, linguistics, computer science, and more.
  • Special Agent positions were discussed, which require a rigorous application process, including background checks, physical fitness tests, and interviews.
  • The webinar highlighted the need for candidates to meet certain requirements, such as U.S. citizenship and a minimum age of 23.

4. Career Development

  • Participants were informed about the various career paths within the FBI, including leadership roles and specialized positions in fields like cybercrime, counterterrorism, and counterintelligence.
  • Ongoing training and development opportunities were emphasized, showcasing the FBI's commitment to continuous growth and learning.

5. Application Process

  • Detailed information on the application process for internships and careers was provided, including how to submit applications through the FBI's official website.
  • The importance of thorough and accurate applications, as well as the significance of integrity in the selection process were highlighted.

6. Q&A Session

The session concluded with a question-and-answer session, where attendees could ask specific questions about the FBI's recruitment process, work culture, and opportunities.

In summary, the "Internships, Careers with the FBI" session served as a comprehensive introduction to the FBI's various programs and career paths. It aimed to educate and inform potential candidates about the opportunities available within the organization and the steps needed to pursue a career with the FBI.


Cybersecurity Awareness Month Webinars

by in , , , ,

October is Cybersecurity Awareness Month (CSAM), and we have several webinars for this month all about cybersecurity. Join us on Oct. 26 from 11 a.m. to noon via Zoom.

We are lucky to be joined by CompTIA's Chief Technology Evangelist, Dr. James Stanger, who will present on "The Cybersecurity Professional Diaries: A Day in the Life". This webinar discusses the myriad of job roles in the world of cybersecurity. We will discuss various roles from SOC analyst, to pen tester, GRC/compliance specialist, auditor, and more. Please use your .edu email address to register for the event

We will also have a panel of several CSU CISOs: Carlos Miranda (CSUCI), Cuc Du (CSULB), and Chris Witthans (CSU Chico). We will give a lucky participant a CompTIA Sec+ Voucher and Educational training bundle (worth $1,000), so please be sure to use your .edu email address to register for the event.

For a complete list of Cybersecurity webinars hosted by CSU campuses, please visit CSU Cybersecurity Awareness 2023 Webinars.

CompTIA: "The Cybersecurity Professional Diaries: A Day in the Life" event link: 
https://csuci.zoom.us/webinar/register/WN_a4eDPiTbQvykAxtgM0FIJA#/registration

CSU Cybersecurity Awareness 2023 Webinars link:
https://www.calstate.edu/impact-of-the-csu/technology/pages/webinars.aspx

Center for Cyber Safety & Education Certification Scholarship Opportunity

by in , , ,

CSUCI ITS would like to bring attention to a great opportunity for a free exam voucher for an ISC2 exam of your choice (CISSP, CSSLP, CCSP, SSCP, CGRC, ISSAP, ISSEP, ISSMP).



ELIGIBILITY

  • You do not need to be a United States citizen or reside in the United States. The scholarship is open to applicants globally. 
  • Applicants must belong to a historically underrepresented minority in STEM – including but not limited to women, Black, Native American, Asian American & Pacific Islander, Hispanic, LGBTQIA+, neurodiverse, and persons with disabilities. 
  • Must plan to sit for the exam within one year of receipt of the award. 
  • Current ISC2 members and non-members are eligible to apply. 

WHAT YOU WILL NEED

  • One Letter of Recommendation outlining the following:
    • How long have you known the applicant and in what capacity? 
    • What skills or abilities does the applicant have that will support them in achieving certification? 
    • What other information about the applicant should be taken into consideration? 
  • Resume/CV – No more than 4 pages maximum
  • Answers to the following essay questions in 500 words or less
    • What experience/s do you have that’s relevant to the cybersecurity field? What sets you apart from other applicants?
    • Describe why you need the scholarship in order to achieve an ISC2 certification. 
    • Describe your personal and educational backgrounds. 
    • What makes you a candidate for success in information security and what are your goals for your professional career? How will the certification be a benefit to you? 
    • Describe any contributions to the cybersecurity field i.e., volunteer work, articles, etc., and any other hobbies or extracurricular activities and what they mean to you.  
    • Please tell us anything else you would like us to know about you in consideration of your application. 

SCORING CRITERIA

Applicants will be scored by members of the ISC2 and will be based on the following categories:

    • Passion 25%
    • Merit 25%
    • Financial Need 50%
Please refer to the Center for Cyber Safety and Education Certification Scholarship page for further information and to apply.

Zoom ToS update as it pertains to AI features and .EDU customers

by in , , ,

Zoom recently updated its terms of service and released Artificial Intelligence (AI) tools for some of its customers. These AI tools are currently not available to CSUCI or to any other Zoom customers on the .EDU tenant. This includes the features recently announced called Zoom IQ Meeting Summary and Zoom IQ Team Chat Compose.

Zoom has acknowledged that further evaluation of their AI features in educational spaces is needed before they can offer AI features to customers with .EDU accounts. While CSUCI Zoom account holders will not encounter AI features in the CSU Zoom environment, here are the new AI features within Zoom that campus users should be aware of in case they participate in any Zoom meetings that are hosted outside of the .EDU environment: 

  • Zoom IQ Meeting Summary: a new AI meeting feature on Zoom that listens to meetings and offers automated meeting summaries to select users with AI features enabled. 
  • Zoom IQ Team Chat Compose: a new AI-powered chat tool that composes messages for users within the Zoom chat space.  
  • When a user enters a meeting with AI enabled, a pop-up message will appear upon joining the meeting, similar to the notification that a user sees when they enter a meeting that is being recorded, informing the meeting participant that AI is in use to create a “Meeting Summary”.

Individual users have the ability to enable or disable the AI features on their own personal Zoom accounts. If a CSU user joins a Zoom meeting that is hosted outside of a .EDU environment with AI enabled and they are uncomfortable with that, they can request that the host disable AI for the meeting. Regardless of whether AI features are enabled, you should NEVER share personal, confidential, or privileged information with users who are not affiliated with the CSU via Zoom chat or during meetings. 

Zoom’s updated terms of service will not impact how Zoom is typically utilized at CSUCI.


October is Cybersecurity Awareness Month!

by in , , , ,

October 2023 marks the 20th Cybersecurity Awareness Month (CSAM).

Cybersecurity Awareness Month

The focus of this year’s CMAM is on four key behaviors:

 

1.    Turning on Multi-Factor Authentication (MFA). Having a strong password is not good enough; using MFA can increase your ability to prevent scammers from getting access to your accounts. MFA is available from Apple, Google, Microsoft, Instagram, LinkedIn, and other companies. To look for what companies offer MFA try using https://2fa.directory/us/  


2.    Using strong passwords and a password manager. It is difficult to remember different passwords for various applications, websites, and services, especially when they are complex. Having a good password manager can help keep your password organized.


3.    Updating software regularly. Your software on your phone, computer, and even your car needs regular updates. Not only do you get new features, but a lot of security fixes and enhancements are incorporated into the updates.


4.    Recognizing and reporting phishing. Take a moment and read the email. Who is the email address that sent the email? Never click on a link in the email; always go to the site by typing the address manually. For more tips on avoiding scams, the FTC has several more examples: https://consumer.ftc.gov/articles/how-avoid-scam.

 

Bell Tower Classroom Upgrades

by in , , ,

Information Technology Services in partnership with Academic Affairs has upgraded 15 of the most used classrooms in the Bell Tower to provide a completely refreshed technology package. These new spaces include hybrid technology with a room camera and microphone to allow for added flexibility and a better experience for our remote students.

 


These classrooms conform to the latest A/V technology standards and were developed in coordination with internal and external campus stakeholders. Student MSFT (Materials, Services, Facilities, and Technology) fee funds were used for this upgrade which represents the largest non-new construction classroom upgrade in our campus’s history. This installation and integration were professionally done and completed on schedule. We are happy to report that initial feedback from faculty who have used the new technology has been very favorable. We look forward to seeing this new technology advance the mission of CSU Channel Islands.


ITS Tech Tips - July 2023 – ITS Service Portal

by in , , , , ,

When members of the CSU Channel Islands community need support with technology, they can rely on the Information Technology Services (ITS) Department to get the help that they need. We strongly encourage communication from end users so that we may best fulfil their needs.

Requesting Help from ITS

There are multiple ways to get ITS assistance. Firstly, users may visit the Solution Center Service Desk in Broome Library 1350 during business hours Monday through Friday for in-person assistance. The Solution Center may also be reached by phone at 805-437-8552 during business hours. Finally, tickets may be submitted using the ITS Service Portal to request assistance with technological needs.

Accessing the ITS Service Portal

The ITS Client Portal can be accessed by students, staff, and faculty by clicking the ITS Solution Center tile in myCI. The ITS Service Portal may also be accessed by guests or CSUCI users using the direct short link at http://go.csuci.edu/solutioncenter. If users do not have access to a laptop or desktop computer, the ITS Client Portal may also be accessed using mobile browsers on tablets or smartphones.

ITS Solution Center tile in myCI

Once the Service Portal has been accessed, users may browse the Knowledge Base by clicking the “Find Answers” button, access the Service Catalog by clicking the “Request Service” button, or view tickets that they have already submitted by clicking the “View Your Tickets” button. Let us briefly explore each of these links and the functions thereof that can be used to request IT assistance that you need.

Browsing the Knowledge Base

Browsing to ITS Knowledge Base

The Knowledge Base is where users can learn more about the services ITS offers and find solutions for commonly occurring technical issues. The Knowledge Base contains a library of articles that are categorized to assist with navigation. For instance, information regarding Webmail can be found under the Email, Calendars, and File Sharing category. Information about using VoIP phones and voicemail on campus phones can be found under the Telephone & Voicemail category. We encourage you to browse the Knowledge Base for general information about the services that you may need to help you carry out your daily operations.

Submitting ITS Requests

When further help is needed, you may submit ITS tickets using the ITS Service Catalog. Like the Knowledge Base, services and service offerings are categorized. For example, a user requesting assistance with connecting their devices to campus Wi-Fi would find the service that they are looking for under the Network and Connectivity category. For assistance with installing software, a ticket would be submitted under the Hardware, Software, Printing and Digital Signage Category, specifically under the Software subcategory.

Requestors may also use the search bar at the top of any page in the ITS Service Portal to easily search for articles or services related to their query. To narrow your search by category, use the “Search” link to run an advanced search.


Searching the ITS Service Portal

Finding Your Tickets

If you have already submitted an ITS ticket and want to obtain or provide an update, select “View Your Tickets” to access the Ticket Requests page. On this page, you will find a list of tickets that you have submitted (or those created on your behalf by the Solution Center). Using the Status filter, you may focus your search on tickets that are actively being worked on by ITS or refer back to closed tickets.

Guidelines for the Usage of AI-Powered Systems in a Professional Environment

by

AI-powered systems such as ChatGPT offer tremendous possibilities in a professional or academic environment. Such tools can reduce time spent completing repetitive tasks, assist with organization, and even streamline communication. Though usage of these tools may be convenient, end users must still ensure that sensitive data remains protected and secure. This article will provide an overview of guidelines to keep in mind when using AI-powered tools in a professional setting. 

Data Protection 

When using AI-powered tools, it is still important to ensure that any sensitive or confidential information remains safeguarded. Refrain from sharing personally identifiable information (PII) or any delicate university-related data with AI systems. 
 
For further information about data protection, please refer to Sensitive Data Storage Best Practices. 


Video Conference Sessions 

Artificial Intelligence (AI) bots such as Otter.AI and Read.AI are increasingly prevalent in virtual meetings conducted via Teams, Zoom, and other conferencing applications. While these tools may enhance convenience, they can also pose considerable privacy and security challenges. Much like recorded meetings, data is sent to the cloud where sensitive information could potentially be accessed. If you are in a meeting where a bot is present, do not hesitate to express your privacy concerns and request that recording be stopped. The host possesses the ability to disable these AI bots. 


Ethical Risks 

While Artificial Intelligence (AI) undoubtedly brings tremendous capabilities, it also introduces significant ethical risks that warrant careful consideration. Here are some key areas of concern: 

  • Bias: AI systems learn from data available on the Internet, which may inadvertently reflect discriminatory or biased viewpoints. 

  • Misinformation: Lacking inherent knowledge or the ability to fact-check, AI systems may propagate misinformation. 

  • Threat Actors: The powerful capabilities of AI can be exploited by malicious actors to disseminate false information, orchestrate social engineering attacks, or create convincingly deceptive content. 

  • Privacy Concerns: Interactions with AI often involve the exchange of personal or sensitive information. It is crucial to weigh the privacy and security implications of providing such information to an AI system, as unauthorized access or data breaches could result in the exposure of sensitive data. 

  • Accountability Challenges: AI systems function as tools, and the onus for their output ultimately falls on the users. This creates complexities in ascertaining responsibility if the system generates harmful or unethical content. As a safety measure, always scrutinize any content produced by AI. 


Vendor Due Diligence 

When engaging a third-party provider for AI services, it's important to understand the license agreement. IT Services should review the vendor's security policies, data safeguarding measures, and adherence to pertinent regulations. This ensures that their security practices are in harmony with CSUCI's established best practices. 


Training and Awareness 

Employees and students should be aware of the best practices for interacting with AI systems like ChatGPT and upholding the University's information security standards. Any inquiries or concerns should be promptly directed to the Information Security Team at infosec@csuci.edu.