Security News & Alerts
Alerts
ITS Security has learned that some end-users may have received e-mails purporting to be from the UNC-Chapel Hill Webmail Team.
The e-mail asks an end-user to reply to the e-mail with their account password. The UNC-Chapel Hill Webmail team did not initiate these e-mails. End-users should be informed that the UNC-Chapel Hill Webmail team will never ask for an end-user's password.
ITS Security is currently working with the ITS Messaging group to prevent responses to this mail and to filter any additional instances of this phishing scam.
If you are aware of anyone who has revealed their password as a part of this phishing scam, please contact the help desk at 919-962-HELP and ask that a Remedy ticket be sent to ITS Security.
In the vast majority of cases, messages that solicit private or confidential information are not authentic and are designed to trick the recipient into revealing confidential information. See http://phishing.org/ for more information regarding phishing.
SOM Information Security News
Information Security Day Event - November 2007
We would like to thank all of the employees who participated in the Security Day Events on November 30.
Prize Winners of the Security Day Event were Renee Everwine-Patient Accounts, Anita Fields-Burn Unit, Vivian Green-Admitting, Sara Hudson-Thurston Arthritis Research Center, Michael Mooney-Patient Equipment, Walter Reaves-Medical Information and Tavares Satterwhite-Pharmacy.
Thanks again for participating and making Information Security Day a great success!
Tumbleweed Secure Messenger - Secure Outgoing Email Transmission
Tumbleweed Secure Messenger provides the ability to send email messages with encryption over a secure communication channel to ensure the confidentiality of Protected Health Information (PHI) and other sensitive information. Please review the Tumbleweed FAQ information for further details.
New SOM Web Publishing Security Training Module
The SOM HIPAA Security Team developed a new web publishing security training module to increase the awareness of secure web publishing standards. Anyone authoring, publishing or administering web content data on School of Medicine computers will be required to take the training module. Stay tuned for release date information.
SOM Audit Policy
The SOM Audit Policy has been approved by the HIPAA Planning and Oversight Commitee. Please review the policy and ensure that your organization is in compliance.
SOM Audit Policy [.doc]
Global Information Security News...Stay Secure
Stay up to date on the latest security news bulletins from SANS, SecurityFocus, CERT, ZDNet, and Symantec.
Information Security & Privacy