Executive Departments Information Security and Data Protection
Our team - headed by the Chief Information Security Officer (CISO) - advises the University on all matters relating to information security and data protection.
Every person who uses the infrastructure of the University of Siegen is obliged to implement the best possible protection of information in their area. As a service facility, we provide the appropriate resources and support services for this purpose. We offer advice and training, draw up guidelines and provide information on current developments.
Information on mandatory training courses
Research, teaching and administration increasingly only work with digital tools. This increases the risk of cyberattacks, often with far-reaching and costly consequences that can disrupt business processes for weeks and render entire departments unable to work.
By investing in education, prevention and the establishment of security standards, the effects can be mitigated in an emergency. This is why the universities in NRW have made a commitment to the Ministry of Culture and Science (MKW) to sign and implement the agreement on cyber security at universities (VzC). Part of this agreement is, among other things, the introduction of mandatory training for all persons who operate in the university network. These must be completed once a year, and the Executive Departments for Information Security and Data Protection provide a comprehensive range of courses for this purpose. One training course must be completed in the area of information security and one in the area of data protection. A combination of the different courses is possible; the Executive Departments also offers a 120-minute Webex training course that covers both areas.
Data protection
Data protection is the art of treating personal data as if it were good china: you own it, you use it, but you don't hand it over to every guest without being asked. With polite rigor, it ensures that personal data is only used to an appropriate extent and for a valid reason.
Information on phishing
- be asked to enter your password to verify your account or identity,
- you are asked to follow a link,
- the sender attaches urgency to the request for action,
- the sender threatens to impose sanctions if you do not comply.
- you receive a request for payment.
Please watch out for spelling mistakes, impersonal salutations, dubious sender addresses, threats to block your account or threats of unpleasant consequences. Attackers often create pressure or fear, appeal to your curiosity or your willingness to help in order to obtain your data.
Delete suspicious emails not only from your inbox, but also from your trash folder If in doubt, contact the sender by phone and ask before opening a link.
Team
Robert Hellwig
zur Zeit nicht im Dienst
vorübergehender Kontakt: carolin.voigt@uni-siegen.de