Don't Click That Link! Cybersecurity Best Practices for Your Institution and Staff
Download as PPTX, PDF0 likes64 views
Rob Nunez, head of support services at the Kenosha Public Library, oversees IT and materials acquisition while advocating for libraries' impact on lives. The library's tech history included minimal training and documentation, which has since improved through comprehensive staff and patron training focused on data privacy and cybersecurity. The training initiatives have led to a significant decrease in phishing susceptibility among staff and enhanced tech support for patrons.
Don't Click That Link! Cybersecurity Best Practices for Your Institution and Staff
- 1. Don't click that link! Hosted by Core: Leadership, Infrastructure, Futures
- 2. About Rob Rob Nunez is the Division Head of Support Services at the Kenosha Public Library, where he oversees the operations of IT and materials acquisition, including cyber security, contract negotiation, and workflow automation. Rob was also a member of the ALA Bill of Rights Article VII working group, and advocates for how libraries change lives. When not at the desk, Rob is a technology enthusiast and house handyman.
- 3. About Kenosha ● Halfway between Milwaukee and Chicago ● ~100K residents ● 4th largest City in WI The Library ● 4 Buildings ● 3 Outreach Vehicles ● ~90 Staff ● 2.5-ish IT Staff
- 4. Overview 1. History of Tech @ KPL 2. Staff Training & Tools 3. How it saved us 4. Patron Training
- 5. Tech History @ KPL ● Little contract negotiation ● No standards ● Little documentation & training ● Staff not understanding “why”
- 6. Data Privacy Training https://dataprivacyproject.org 4 Training Session Topics: ● Introduction to Data Privacy ● Risk Assessment & Passwords ● VPN and TOR and Malware (Oh My!) ● Browsing and Privately
- 8. Staff Training - KnowBe4 (2019 to 2020) - InfoSec IQ (2020 Forward) Training Schedule - Bi-weekly Tests - Monthly Videos - Varying Difficulty
- 9. Staff Training Phone Phishing USB Attack
- 10. Staff Training Results - Phishing prone 18% drop - Included in onboarding - Finding a way to balance Tools Needed - All Management has 2FA (OTP & YubiKey) - Internal Laptop Borrowing Program - Single sign-on when possible
- 11. It Paid Off - Checked the link - Alerted IT right away
- 12. Pretty Obvious
- 13. Patron Training ● Updated existing programs ○ Every tech class has data privacy & security elements ○ Classes for just these topics ○ One-on-one tech appointment (Pre & Post COVID-19) ● Deployed Secure Print & WiFi access ○ ePrintIT & MyPC from TBS ○ WPA2 with RADIUS Auth ● Marketing Campaign about Security & Privacy
- 14. Questions?