More Secure Yale
A More Secure Yale starts with each of us.
The cyber world is full of opportunities and challenges. At Yale, we are committed to empowering you with tools and knowledge to navigate it safely. More Secure Yale, an initiative of Yale’s Information Security Office, will introduce practical solutions to take proactive steps to address cyber threats. This starts with you. Together, we can protect our electronic resources and ensure we secure Yale’s missions, together.
What can you do right now to help build a more secure Yale?
You can learn more about these components of More Secure Yale, below.
More Secure Device
Protect your device to protect Yale resources.
What it is: Duo Desktop agent performs device ‘health checks’ to verify that your device meets specific security components of Yale’s Minimum Security Standards (MSS) before accessing university resources.
Why it matters: A healthy device is your first line of defense against cyber threats.
How it works:
- Confirms a password is set. This prevents unauthorized access to the device.
- Checks that encryption is enabled. This protects the data from data loss
or breaches if the device is lost or stolen. - Checks the Operating System (OS) version. Devices running older OS versions are vulnerable to known exploits and security flaws.
- Checks that an antivirus/anti-malware agent, e.g. CrowdStrike, Forcepoint, is running.
- The Duo Desktop agent does not access any data, e.g. email, documents, etc., stored on the device.
More Secure Authentication
Enhanced phishing protection for your login credentials.
What it is: Stronger, phish-resistant Multi-Factor Authentication (MFA) methods to verify your identity before accessing Yale resources.
Why it matters: Passkey technology ensures only you can access your account,
even if your password is compromised.
How it works:
- YubiKey as Passkey: Combines something you have (a physical YubiKey)
with something you know (your PIN) for effortless and secure login. - Mobile Phone as Passkey: Combines something you have (your mobile device)
with something you know (your password) to securely authenticate access.
More Secure Mindset
Your small steps to working with a security mindset make a big difference.
What it is: Bee Cyber Fit at Yale: The Essentials to Working Securely is a self-paced training curriculum designed to boost your cyber knowledge and build cyber-safe behaviors in your daily work at Yale.
Why it matters: We all play a role in protecting sensitive Yale data and our own. Knowing what we can do to protect that data is a critical step in being “More Secure”
How it works:
- Enroll in the Bee Cyber Fit at Yale training in Workday Learning.
- The training begins with a message from Yale’s Chief Information Security Officer,
Jeremy Rosenberg. - The remaining five modules, each approximately 15 minutes in length, can be completed
in whatever way is most convenient for you - one at a time or all at once. - Topics cover simple, yet critical, cybersecurity behaviors we can adopt in our everyday lives:
Know Your Risk, Click with Caution, Protect Your Identity, Apply Updates, and Report Suspicious Cyber Activity.
How to learn more about More Secure Yale
For more information, please contact the Identity and Access Management team.