IT security at Linnaeus University
The IT security work at Linnaeus University aims to maintain the required levels of secrecy, correctness, integrity and accessibility of the university's information resources.
The term "information resources" refers to the actual information as well as the resources that are used to manage this information. This means that information and IT security involves more than just the protection of information systems. Other resources - not least people's ability - also play an important role in the concepts of information security and IT security.
In our information society, more information than ever before is processed, stored, communicated and copied. This places higher demands on the end users. A consequence for individuals is often that the boundaries between professional life and private life become blurred.
We work pro-actively to support all users in performing their tasks. This involves anything from advising users about sensible security measures to ensuring an appropriate level of security on our IT systems.
Incident Response Team (IRT)
IT security issues at Linnaeus University are handled by the IRT, where staff and students can get advice on specific issues regarding IT security.
The IRT is a multi-disciplinary team of IT technicians specialising in systems, networks, computer forensics and support, in close collaboration with other IT staff.
Among other things, the IRT is responsible for:
- Processing internal and external cases concerning IT security
- Providing recommendations to staff and students regarding IT security
- Investigating reported IT security issues
- Handle all their cases under secrecy.
If you require advice or would like to report a specific IT security issue, you are welcome to contact IRT by sending an e-mail to irt_AT_lnu.se.
Never give away your password – think twice before you log on to a website!
Phishing is a method used to trick people into giving away important personal information, often passwords. Lnu frequently receives phishing emails and quite often someone is deceived. Phishing emails often request that you click on a link to a web page, where you are told to enter your username and password. Even though this website may look like an Lnu site, it is not. Furthermore, you are often told that it is urgent that you follow instructions and quite often you are threatened with your email account being disabled if you do not follow the instructions.
Some examples of phishing emails:
- The size of your mailbox has exceeded the limit and your email will be blocked if you do not click here...
- Because of security updates you need to log on to your webmail or it will be blocked, click here...
- A third party has tried to log on to your account and you now have limited access to your webmail. To reactivate, click here...
Please keep in mind:
- To enter your password on a website is the same thing as giving away your password.
- IT Office will NEVER ask for your password!
- IT Office will NEVER request that you click on a link in order to verify your user account or email account!
- IT Office will NEVER threaten with your account being blocked if you do not click on a link and enter your password, or if you fail to login!
If you have clicked on a link in a phishing email and entered your username and password, it is of utmost importance that you change your password as soon as possible. Otherwise, at best, your account will be used to send spam emails and your inbox will be filled with "Delivery failure" emails. At worst, the account information can be used to access all data on your P: as well as all the data on S: to which you have access.
If you have any questions feel free to contact the IT office.