Carnegie Mellon University

October is National Cyber Security Awareness Month (NCSAM). This year's theme, "Don't Make It Easy for Them," focuses on taking small, achievable steps to protect yourself throughout the year. The goal is to make it more difficult for cyber criminals to steal your identity, data, time, and money. We strive to make online safety easy to understand and to make it a habit for everyone. Let’s work together to create a safer digital environment for our campus community.

As part of this year’s National Cyber Security Awareness Month (NCSAM) initiatives, the Information Security Office (ISO) is enrolling faculty, staff, and students in the annual Security 101 online training refresher for cybersecurity awareness. This training provides important information about university policies, cyber threats, and security best practices. 

Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA)

Why 2Fa Matters

Understanding how two-factor authentication protects university data—and how to extend these safeguards to your personal digital life.

Read Article

Password Management

Computer keyboard with scattered letter and symbol keys spelling “Strong!” to represent password strength.munity

Simplify Your Security: The Case for Password Managers

Debunking common security myths and learning how to set up a password manager to protect your accounts at Carnegie Mellon University.

Read Article

Secure Devices and Software Updates

Hands using a laptop with a digital Updating progress bar and security icons representing software updates and device protection.

Keep Your Tech Secure: Software Updates Are Your First Line Of Defense

Best practices for protecting your devices, Andrew account, and university data.

Read Article

Phishing and Social Engineering

Person using a laptop surrounded by threatening email envelopes, representing cyber scams and phishing.

Don’t Do Their Work: Spotting Common Cyber Scams

Understanding how cybercriminals trick individuals into installing malware or granting remote access—and how to identify and avoid common scams like ClickFix, fake tech support, and malicious software installs.

Read Article