Cybersecurity Training for Employees

REMINDER: Cybersecurity training will be open for all LLCC employees from Oct. 1-31. If you have not done so yet, please go to https://llcc-il.safecolleges.com by Oct. 31 to complete your training.

Per board policy “10.4 – Employees’ Role in Security,” cybersecurity it is the responsibility of all users. It is strongly recommended that you complete the training.

Thank you and please do not hesitate to contact the IT Helpdesk at 786-2555 or helpme@llcc.edu should you experience any technical difficulties accessing the training.

Tech Tip: Stop Sync and Manage Files in OneDrive

Stop the Sync or Manage Folders in OneDrive for PC

Remote Access Knowledge BaseFor detailed instructions on how to stop the sync for PC or Mac, view the Employee Portal > IT > Remote Access Knowledge Base, OneDrive folder.

Stop Sync

  1. Right click on the Blue cloud and select Settings.
  2. Stop sync on OneDrive and each Group Site individually.
  3. Confirm the Stop sync

Manage Folders to Sync

  1. Right click on the Blue cloud and select Settings.
  2. Select Choose folders for OneDrive of the Shared Library of the Group Site in SharePoint.
  3. Make all files available is the default. Remove the selection to turn off and select manually. Select individual files by placing a check mark in the box to turn the sync on.

Stop the Sync or Manage Folders in OneDrive for Mac

When you install the Microsoft OneDrive sync app for Mac, a copy of your OneDrive is downloaded to your Mac and put in the OneDrive folder. This folder is kept in sync with OneDrive. If you add, change, or delete a file or folder on the OneDrive website, the file or folder is added, changed, or deleted in your OneDrive folder and vice versa.

Manage your syncing sites   

You can manage your syncing sites in the sync app settings.

  1. Click the OneDrive icon in the menu bar.
  2. Click Preferences, and then click the Account tab.
  3. Choose Folders for that location.
  4. Choose the folders that you want to sync.
  5. To stop syncing a site, click Stop Sync next to the site. (Copies of the files remain on your computer. You can delete them if you want.)

Do your part #Be CyberSmart – Compromised account

What should you do if you think that your LLCC account has a security breach?

If there is any question about a breach, immediately change your LLCC password (via Outlook web/Office 365) and notify the IT Helpdesk at 217-786-2555 or helpme@llcc.edu.

If the computer has any personal online account passwords stored, it is recommended that you change these passwords immediately, as well as check with any financial institutions for issues.

When should I change my passwords?

It is imperative that you immediately change your passwords any time you feel that you may have been subject to a phishing or ransomware attack with LLCC or personal accounts.

Make sure to create new passwords that are not easily guessed, different than the last password and enable two-factor authentication (security questions, phone call or text for access, etc.) whenever possible.

What are some signs that one of my online accounts may have been hacked?

There are posts you never made on your social network page or personal messages sent via Messenger, etc.

  • Posts may encourage your friends to click on a link or download an app.

A friend, family member or colleague reports getting email from you that you never sent.

Your information was lost via a data breach, malware infection or lost/stolen device.

If you believe a personal account has been compromised, take the following steps:

Notify all of your contacts that they may receive spam messages appearing to come from your account.

  • Tell your contacts they shouldn’t open messages or click on any links from your account and warn them about the potential for malware.

If you believe your computer is infected, be sure your security software is up to date, and scan your system for malware. You can also use other scanners and removal tools.

Change passphrases to all accounts that have been compromised and other key accounts as soon as possible.

  • A strong passphrase is a sentence that is at least 12 characters long.
  • Focus on positive sentences or phrases that you like to think about and are easy to remember (for example, “I love country music.”). On many sites, you can even use spaces!

If you cannot access your account because a passphrase has been changed, contact the service provider immediately and follow any steps the provider offers for recovering an account.

Working with the recycle bin online or via file sync to a local device

When you are working with your files and wish to delete a file or folder, there are a few things to keep in mind. If you have your files and folders set to sync to your PC or Mac any manipulation that occurs with the file or folders will mirror on the web and vice versa.

Delete files

Deleting a file or folder via the web (Office 365 online application) will move the file to the Recycle bin on the web.

  • Select the file or files you want to delete.
  • Select Delete. The files move to the Recycle bin.

Restore files

  • Select the Recycle bin via the web (Office 365 online application).
  • Select the individual file or folder and select Restore.
  • If you want to restore all files and folders, select Restore all items.
  • The file(s) and folder(s) will be restored to the original location.

Items in the recycle bin online are automatically deleted after 93 days, the oldest items will be automatically deleted first.

See the video Restore Deleted Files or Folders in OneDrive. The functionality is the same for a Shared Library in a Group Site in SharePoint.

Delete files Synched to a local device

Deleting a file or folder via the local computer sync (File Explorer on a PC or Finder on a Mac) will move the file to the Trash bin on the local device and remove the file or folder from the cloud storage in OneDrive or the Shared Library in SharePoint.

To restore a file or folder that has been deleted from the local device, you will need to access the local device Trash bin.

If you want to delete files or folders from your local device, but have the data remain on the web, you must first Stop the sync on your local device.

Remote Access Knowledge BaseFor detailed instructions on how to Stop the Sync or Manage Folders in OneDrive for PC.pdf or how to Stop the Sync or Manage Folders in OneDrive for Mac.pdf, view the Employee Portal > IT > Remote Access Knowledge Base, OneDrive folder.

Do your part #Be CyberSmart – password management

Multi-factor Authentication

LLCC has turned on multi-factor authentication, meaning that your work or school account sign-in now requires a combination of your username, your password, and a mobile device or phone. Adding MFA to LLCC accounts ensure that it’s more secure than just a password with random password changes, by relying on two forms of authentication: something you know and something you have with you.

Multi-factor authentication can help to prevent malicious hackers from pretending to be you, because even if they have your password, odds are that they don’t have your device, too.

For additional information on Multi-factor Authentication see the Employee Portal > IT page.

Create Strong Passwords

  • Create passwords with a minimum of 8 characters that are comprised of upper and lowercase letters, numbers and symbols.
  • Use a passphrase when possible. This is long string of characters that can range from a sentence, quote, etc. and intersperse upper and lowercase letters.
  • Choose difficult to guess passwords.
  • Avoid common words and phrases.
  • Be creative in the spelling. Use special characters for letters, phonetics for single letters (EX. PH for an F), and intentionally misspell words.
  • Keep your passwords secure and do not share them with others. Never share them in an email or text.
  • Do not use the same password for multiple online accounts. Create a different password for each account.

Use a Password Manager

Because there are a lot more threats out there during the pandemic, there are plenty of bad actors looking to take over accounts. The easiest way to protect your accounts from being compromised is to use long, complex, and unique passwords and the easiest way to use and keep track of your passwords is to use a password manager.

A password manager is software that is installed on your device and there are many password manager software applications available to personal consumers. Some are free, while others may charge a monthly or yearly fee. Some examples are: LastPass, 1 Password and Dashlane​.

For more information on Cybersecurity and Password, see the Employee Portal > IT page.

Copy or move documents from OneDrive to SharePoint

Remote Access Knowledge BaseThe Copy or Move Documents from OneDrive to SharePoint.pdf is available on the Employee Portal > IT > Remote Access Knowledge Base > OneDrive folder.

Documents that you have stored in OneDrive can be copied or moved to the Shared Library of a Group Site in SharePoint that you are a member of. If you do not want the file to be edited by others, you can share the file or folder with the Group Site in SharePoint and apply view permissions only. The file will be accessible from the Shared (with us) link in the Navigation Pane.

Copy the file

When copying a file from OneDrive to the Shared Library of a Group Site in SharePoint, you are creating an additional document. Should one of the documents be edited, the changes will not be made to the other document, as they are individual documents. Sharing a document with an individual or Group Site will allow edit of one document only.

When you Copy a file to a Shared Library, and the document has a Version history, meaning the document has been edited at least once, only the latest version is copied. To copy earlier versions, you need to restore and copy each one. For more info about versioning, see Enable and configure versioning for a list or library.

How to Copy a file

  • Select files or folders in a SharePoint library.
  • On the command bar, select (More), and then select Move to or Copy to.
  • On the Move or Copy panel, choose a destination in the current library, OneDrive, or another SharePoint site.
  • On the Move or Copy panel, select a folder in the current library and select Move here or Copy here.
    • If you want to move or copy your files to a new folder, select New folder to add a new folder.
    • Enter a name for the folder, select the checkmark, and then select Move here or Copy here,

Move the file

  • When moving a file from your OneDrive to a Shared Library in a Group Site, you are maintaining only one document. The file will be removed from your OneDrive and stored only in the Group Site.
  • All members of a Group Site in SharePoint have full access to the document for editing permissions.
  • When you Move a file to a Shared Library, the Version history of the document is copied to the new destination.
  • After moving a file, if the file was shared, the original permissions and link will no longer work.
    • The file will need to be shared from the new storage location.
  • While moving a file, it will continue to appear in the original file location until the data transfer is completed.
    • After the file is successfully moved, it will automatically be deleted from the original file location.
    • The file will be accessible in the Recycle Bin. This will be either OneDrive or the Group Site in SharePoint, depending upon the original file location.
      • OneDrive Recycle Bin allows recovery of the file or folder for 30 days.
      • The Group Site in SharePoint Recycle Bin allows recovery for 90 days.
  • It is not recommended to move OneNote notebooks outside of the OneNote app.

Stop, think, connect – report phishing emails

Phishing is a fraudulent attempt to obtain personal information from you, such as passwords, banking information, etc. and are most commonly sent to you by email.

Most organizations — banks, companies, etc. — will not ask for your personal information over email.

Stop

  • Don’t open emails from strangers, and don’t click on unfamiliar sites; if you think an offer is too good to be true, then it probably is.
  • Requests to update or confirm your personal information or that state your account has been suspended are common attempts.
  • Be wary of messages that encourage you to act immediately, as well as offers that invite you to join an event or group on a social networking website with incentives like free gift cards.

Think

  • Look at the email carefully.
  • Hover your mouse over the sender’s name and any links within the message body to view the sender’s address or URL content.
    • Never click on any of the active links unless you are 100% sure they are legitimate.
    • It’s better to enter a new website address by typing it into the browser instead of following the link.

Connect

  • Report the message via your Outlook desktop app or Outlook 365 with the built-in feature.
  • You do not need to forward this onto the Helpdesk or call.
    • The most efficient and fastest way to notify IT is to use the Report the Message as Phishing feature.

Outlook Desktop

With the message selected, click on Report Message in the Ribbon. Select Phishing. The malicious email will be reported directly to Microsoft. Reporting malicious and unsolicited emails makes LLCC’s email filtering system more effective.
"Report Message" is on the right-hand side of the Home ribbon in Outlook. Select it, and then "Phishing" in its sub menu (second option, below "Junk" and above "Not Junk").

Outlook 365

Select the email from the list and click on the Not Junk drop-down arrow. Select Phishing. The malicious email will be reported directly to Microsoft. Reporting malicious and unsolicited emails makes LLCC’s email filtering system more effective.
In Outlook 365, across the top of the screen, under the search box, there are the options: Emply folder, Not junk, Move to. Select Not junk and then Phishing to report the email directly to Microsoft.

Phishing alert

A large number of LLCC employees received an email message today from an individual impersonating Dr. Warren. The email was sent from  “presidentedu57686@gmail.com.” It has no subject, and the content reads: “Good day there is something i need you to do, kindly drop your cellphone number to send a text message.” This email is NOT a legit email. It is a phishing attempt to acquire your personal information starting with your cellphone number. Please report the message as phishing and disregard.

Outlook Desktop

With the message selected, click on Report Message in the Ribbon. Select Phishing. The malicious email will be reported directly to Microsoft. Reporting malicious and unsolicited emails makes LLCC’s email filtering system more effective.
"Report Message" is on the right-hand side of the Home ribbon in Outlook. Select it, and then "Phishing" in its sub menu (second option, below "Junk" and above "Not Junk").

Outlook 365

Select the email from the list, and click on the Not Junk drop-down arrow. Select Phishing. The malicious email will be reported directly to Microsoft. Reporting malicious and unsolicited emails makes LLCC’s email filtering system more effective.

In Outlook 365, across the top of the screen, under the search box, there are the options: Emply folder, Not junk, Move to. Select Not junk and then Phishing to report the email directly to Microsoft.
Reporting malicious and unsolicited emails makes LLCC’s email filtering system more effective.

Phishing is a common identity theft method used by fraudulent parties. NEVER send your personal information including passwords, user IDs, credit card numbers or a social security number via email.  Passwords should NEVER be shared with ANYONE in any form.

To learn more about “phishing,” follow this link: https://llcconline.sharepoint.com/IT/SitePages/Cybersecurity.aspx

Please contact the IT Help Desk if you have any questions or concerns at helpme@llcc.edu or 217-786-2555.

Cybersecurity Training

As a reminder, cybersecurity training is important and open for all LLCC employees through Oct. 31. The training modules can be accessed on the SafeColleges website: https://llcc-il.safecolleges.com. All five modules should be completed by the end of October.

Posted in ITS |