To help protect the integrity of WVU systems and data and reduce the risk of a damaging security incident, employees on all campuses are required to complete annual cybersecurity awareness training.
Approved by the WVU Board of Governors, training will begin tomorrow (Oct. 2) as part of National Cybersecurity Awareness Month.
Health Sciences employees will receive a separate email from ITS today (Oct. 1) with additional guidance.
Employees will receive an email from Infosec IQ to their primary WVU email account, indicating you have been enrolled in the FY2025 Cybersecurity Awareness Training course. The mandatory course will take approximately 45 minutes to complete, and employees will have 60 days to finish the 11 online modules and an assessment.
Security is a shared responsibility. Educating faculty and staff on how to work safely and identify various kinds of phishing scams and ransomware helps protect the institution and reduces the risk of an unintended data disclosure or a deliberate data breach.
Completion of this training is required by the Information Security Policy. Units that handle Sensitive Data, including Information Technology Services, Student Financial Services and named University Health Care Components, have previously been required to complete annual cybersecurity training. In the spring of 2024, the WVU Board of Governors extended the requirement to all employees.
Bad actors change tactics and technology evolves, so completion of updated training modules will be required annually. This year, for example, there are modules on the University’s guidance for and the safe use of artificial intelligence.
All employees must complete training, including graduate assistants, students with an employee role, faculty/staff emeritus with an active courtesy appointment, and Shared Users.
The enrollment email will be sent to @mail.wvu.edu or @hsc.wvu.edu for employees. Student employees without an @mail or @hsc employee email account will receive their enrollment emails in their @mix.wvu.edu accounts. Employees who don’t complete the course will be identified as non-compliant with WVU policies and will be required to change their Login password every 45 days rather than once a year.
Employees who don’t have a WVU email address or log into WVU systems for their jobs, such as summer camp workers or athletic event workers, will not be required to take training. Contact the ITS Service Desk at 304-293-4444 or ITSHelp@mail.wvu.edu if you have an employee who fits this description but received an enrollment email.
Employees with an @hsc.wvu.edu email account who previously completed this training in SOLE will be transitioned to Infosec IQ and will no longer complete this training in SOLE.
Review this article for more information. Log in with your primary WVU email account to see this content.