Center for Information Technology Services

Office of IT Security and ComplianceSANS

Security Awareness - Stay Updated with the Latest Cyber Threats and Technologies

  • Watch videos about current security related topics and learn how to protect yourself from threats.
  • Watch video to learn about Data privacy awareness.

IT Security Strategy
Computer security is a serious problem. It's a more vexing problem for campuses and complex organizations where semi-autonomous units have distinct missions, needs and IT systems. The University of Maryland is a case in point. [More]...

Notice Concerning Passwords and Password Protected Screensavers

Users of UM network resources are required to have a user password at startup and must also “Lock Down" (or log out of) the computer each time the computer is left unattended.  Individual user sessions must also initiate a password protected screensaver after a period of no more than thirty (30) minutes of inactivity.

Additional policies issued by schools and departments may be applicable to your use of UM computing resources.  View the latest UM Computer Workstation Security Policy and other computing policies.

Recent Phishing Attempts

CITS has recently seen a noticeable increase in e-mail that looks very official and professional asking for user login credentials.  Unfortunately some users fall victim to these attacks.  Once the spammers have valid login information, they begin sending messages to the internet using University identity. Because of the high messaging volumes being sent to the internet from the compromised accounts, UM servers become “blacklisted.”  Once UM servers are blacklisted, even valid messages sent by UM users are denied!

Fighting spam and not falling victim to social engineering attacks is everyone’s job.  Remember that the University will NEVER ask for your user login credentials in an email mail message.  Simply delete these messages; DO NOT reply, EVER.  

For more details,
See: http://www.umaryland.edu/helpdesk/general/phishing.html

If you have any questions please contact the IT Help Desk at 410-706-HELP(4357), or Email Help Desk.

National Cyber Alert System

Campus Wireless Information
UM's wireless network is designed with multiple levels of security each providing different levels of access

Information about the Campus Anti-SPAM Service
Anti-SPAM and Anti-Virus protection is provided at the campus network gateway for email messages entering the UM campus.  These tools greatly reduce the number of SPAM messages able to get through to campus users' mailboxes.  [More]...

Enterprise Collaborated Policies/Standards:

University of Maryland (UM) IT Security Program 

University of Maryland (UM) Information Technology Anti-Virus Policy

University of Maryland (UM) Microsoft Windows Operating System Patch Management

University of Maryland (UM) Enterprise Campus Network Device Naming Conventions

University of Maryland (UM) Enterprise Password Management Policy

University of Maryland (UM) Enterprise Incident Response Policy

University of Maryland (UM) Enterprise Remote Access Policy

Campus IT Security Listserver
If you'd like to be added to the UM Security List to receive updates, please contact Fred Smith.

   

Quality Assurance, Policy, and Planning Support

The Quality Assurance, Policy, and Planning Support area is responsible for formulating organizational policies and practices as well as focusing on process improvement and ensuring quality products and services. Some of the activities include:

  • Performing product reviews, walkthroughs, audits, and testing
  • Developing CITS organizational policies and practices and maintaining the CITS on-line Policies and Practices manual
  • Supporting development of campus-wide UM policies and practices
  • Supporting Legistlative, UM System and external audit activities

Staff:

Carol Nelson, Manager
410-706-4159