Alerts News and Events

UWinnipeg introduces new information security policy 

The protection of University data has become an increasingly important consideration for UWinnipeg, and for higher education more generally, due to the rapidly changing information security threat environment in which we operate. 

To that end, the University has established a new Information Security Policy. Together with its associated Procedures, this policy provides guidance on securing University data. It complements other existing policies, including the Acceptable Use of Information Technology Policy, the Privacy Policy, the University Archives Policy, and the University Records Policy. 

The Policy requirements reflect the sensitivity of University data and offer remediation for the risks that could be posed by their mishandling. In particular, the Policy outlines the different classifications for University data; introduces actions required to secure data in accordance with these classifications; and details the roles of responsible administrators.

The Policy also establishes the Information Security Working Group (ISWG), which is responsible for creating, assigning, and amending secure handling requirements for University data, as well as for disseminating the Policy and Procedure documents and educating the University community about them. 

Over the next several months, Technology Sector staff will meet with University community members to explain the key information security principles established by the Policy and Procedures, including the roles and responsibilities of senior administrators, the ISWG, and the rest of our community. At these sessions, there will be opportunity to bring your questions and comments forward. 

The Policy and Procedures are available for review on the website:

• Information Security Policy
• Information Security Procedures

October 2022 is Cyber Security Awareness Month

This year's theme is Fight Phishing: Ruin a cyber criminal's day!

Cyber Security Awareness Month (Cyber Month) is an internationally recognized campaign held each October to help the public learn more about the importance of cyber security. This campaign helps Canadians stay secure online by teaching them simple steps to protect themselves and their devices.

Phishing is a cyber criminal’s attempt to get sensitive information by pretending to be a legitimate sender like a bank or a government organization. Phishing is the third most common scam in Canada. Each week, we’ll highlight different aspects of phishing scams to help Canadians prepare themselves against, or recover from, all types of phishing.

Week 1: You got phished

October 3-7

Even the savviest tech expert can fall for a phishing attempt. This week, we’ll focus on actionable steps to take to recover from a phishing attack with topics including:

• How to tell if you have been phished
• Actionable steps to recover from a phishing attempt, such as:
  • securing affected accounts
  • setting up anti-virus software and automatic software updates
  • data recovery and backup
• Reporting the scam