Information Security Incidents
Report suspected information security incidents, including suspected loss or disclosure of
Resources
About Us
Comparisons
There are a couple of options for working with offline files with Google Drive and Google shared drives.
Experts & Communities
Our Charge
The Cloud Center of Excellence Governance Group was charged by Vice President and CIO Bernard Gulacheck to to ensure the sustainability of the institution’s in
The University community collaborates with University Information Security to review and develop University of Minnesota information security policies and standards to protect University data and information technolog
Good Practices
Challenge
Backups are essential. Your hard drive could fail, you could lose your device, it could be stolen, or you could get a malware infection that takes your files hostage.
As a rule, do not share downloaded materials with others via peer-to-peer software like BitTorrent or other torrent applications.
Challenge
Older or unpatched software increases exposure to vulnerabilities in the operating system, application software, and apps that can allow attackers to control your system or steal your private data.
Learn more about how to make your online experience safer and also help secure the University.
Email scams (known as phishing) are a common method to trick you into visiting a fraudulent website, opening an infected document, or logging in to "validate your email account."
Challenge
Identity theft can happen to anyone at any time. It can be hard to immediately tell if you are affected, or to know who to notify.
To keep your device current, enable automatic updates and install updates when notified.
Downloading or sharing software, entertainment, or images may violate United States copyright law. Many torrent applications default to continue sharing your downloads with other users.
How-Tos
This article contains routine installation and connection instructions.
This article is designed to assist in getting Box Drive installed on Health Sciences Technology (HST) supported devices.
When inviting an internal or external user as a collaborator within a folder, you will have the ability to set the level of access that user has to your content.
Sometimes when you're sharing a file with someone you know they will need it for only a certain amount of time, or perhaps legally they or you can only have access to it for a certain amount of days.
How do Box Notes work in folders that have been synced?
Box Notes are synced to your computer like other documents, and will appear in your Box Sync folder. Box Notes will open in your browser.
While you are working in Box Notes Box Secure Storage automatically creates saved versions roughly every five minutes or after f
You can choose the type of email notifications that you receive on actions taken within Box.
There are two ways to change or transfer folder ownership to another collaborator. Through the Collaborators menu in the right pane of a folder or from the Collaborators page of a folder.
Box Notes is an easy-to-use document creation tool built natively in Box and available to all Box users.
Box Notes is an easy-to-use document creation tool built natively in Box and available to all Box users.
You can create different file types or folders directly from your Box account.
You can delete files or folders that you own.
When using Box Sync your folders and files are stored both locally on your computer and within Box.
The University DOES NOT recommend downloading data when working with Box for secure storage.
Box Notes is an easy-to-use document creation tool built natively in Box and available to all Box users.
You should always be collaborating with only the people who need access to files and folders, and with the least amount of
Box Notes is an easy-to-use document creation tool built natively in Box and available to all Box users.
What is Box Secure Storage?
Box is a secure, cloud-based tool for storing and sharing sensitive data.
The Updates page provides logs of all the activity that is happening in your Box account. The updates page shows logs for actions taking place on files and folders such as:
Box Edit is an add-on feature that allows you to edit or create files directly on Box.
There are two apps that can help you work with Box files from your desktop. The recommended app to install and use is Box Drive.
Box Secure Storage provides many security features designed to protect your sensitive data files. However, there are actions you can take to make sure your data stay protected while in Box:
Locking/Unlocking Files
If you are working on a file with other collaborators, be sure to lock files before opening them with Box Edit.
If you have not yet done so,
To hide collaborators, you must be the owner of the Collaboration Folder.
Events like leaving the university or changing roles can trigger a need to change collaboration levels or completely remove someone from a folder within Box.
This article is intended for migrating large amounts of data from Shared Drives or Folders into Box Secure Storage using the Box web interface.
This article is intended for migrating large amounts of data from Google Drive into Box Secure Storage using the Box web interface.
To print using Box Notes, click on the more options
Is the content in your trash?
Are you the owner or deleter of this content?
You should be removing a collaborator's access as soon as they no longer need the file or folder that you are sharin
Sometimes a folder should only be accessible to other users within the University of Minnesota system. This article explains how to do this to a folder.
Shared links can be used to quickly get a collaborator directly to a shared file or folder.
Users should keep their collaborators (the people to whom they give access to folders) up-to-date.
While you can share with both internal and external collaborators through your Box account there are special considerations to take when sharing with alumni.
Tags in Box can help you organize and easily find your information.
Box keeps track of your file versions when you upload new files and when you use
According to the Research Data Management Policy, the University of Minnesota owns all data created by faculty, staff, and non-student tr
Sometimes when you try to access Box, you may be prompted to login to a Box screen rather than the standard University of Minnesota login page. You should not use this Box screen to login.
Why can't I see a folder I was invited to?
If a user is invited to collaborate on a folder and they do not a
Each user has an unlimited amount of storage space available. However, individual files must be less than 15 Gb each. If you need to make files smaller use a compression tool such as 7-zip.
Box has several visual indicators that can help you easily understand things about the folder, such as collaboration level and ownership. The below is an overview of these icons and indicators.
Permission levels on Box follow a waterfall' design in which individuals only have access to the folder they are <
You are able to upload individual files or entire folders into your Box account.
You can easily upload files or send attachments to a specific Box folder by email when you enable the Allow uploads to this folder via email option.
There are two apps for editing Box data from your Desktop. The University's preferred solution is Box Drive.
You can both create and edit files in Box using Microsoft Office Online Integration.
The Trash folder allows you to recover files and folders that have been deleted. By default, items in the Trash will be purged after 60 days.
There are various ways to integrate and update data within Box. This article covers the basics of the three ways you may want to modify data with Box and when or why you may want to use each.
Box and Sensitive Data
Box is a secure data storage and sharing tool that is the primary secure sharing tool for the University of Minnesota.
The University of Minnesota's Box Secure Storage may function differently than other university or personal Box accounts you have used.
Canvas integrates with Google Drive both at the course level and at the Group level making it easy for you to collaborate with others in both environments. There are two different integrations at each level.
Canvas integrates with Google Drive both at the course level and at the Group level making it easy for you to collaborate with others in both environments. There are two different integrations at each level.
Canvas integrates with Google Drive making it easy for instructors to include collaborations, content sharing, and assignments directly within Canvas.
Canvas integrates with Google Drive making it easy for you to share content and collaborate with others, students and instructors alike.
Canvas integrates with Google Drive making it easy for you to share content and collaborate with others, students and instructors alike.
The most common issue people experience when using Google Drive in Canvas is an authorization error or authentication failure.
Description
This article will go through the basics of using the VPN before logging into a device that has been shipped directly to a persons home and they have not logged into that device before.
This article will assist users who are running Ubuntu in connecting to the UMN Network via VPN.
File System Paths
The path, or unique location of, the Cisco AnyConnect VPN for Mac OS X file system is /opt/cisco/vpn
The Command Line Interface (CLI) is a mechanism for interacting with a computer operating system or software by typing commands to perform specific tasks, and is a valid way to use AnyConnect.
Event logs are available via syslog or via a standard application called Console.
This article provides step-by-step instructions to connect to the Virtual Private Network (VPN) client Cisco AnyConnect using an Android or iOS device.
Follow these instructions to connect to the Cisco AnyConnect VPN Secure Mobility Client on your Mac.
This article provides step-by-step instructions to connect to the Virtual Private Network (VPN) client Cisco AnyConnect using a Windows 10 computer.
Follow the steps below to install the Cisco AnyConnect client on your iOS or Android device.
These directions outline the process of installing the Cisco AnyConnect Secure Mobility Client and Diagnostic And Reporting Tool (DART) for Linux.
Follow the instructions below to install the Cisco AnyConnect VPN client for Mac.
This article covers installing Cisco AnyConnect on a Windows computer with a University of Minnesota profile built in.
The following steps will walk you through connecting to UofM VPN natively with most versions of macOS 10.6. and newer.
What is Martin?
Martin is what Salesforce calls a full sandbox. That means that it is a complete copy of the production system.
Description
This article will describe how to resolve the following error in Cisco AnyConnect Secure Mobility Client:
These instructions are for Shared Drive Managers and Content Managers. It is possible to add members who do not have a University of Minnesota email account to a Shared Drive.
Google Shared Drives are shared spaces where teams can easily store, search, and access their files anywhere, from any device.
NOTE: To be added as a remote desktop user of a HST device or if the user needs access to the AHC01 VPN Departmental Pool, the user must fill out the
University Information Security (UIS) maintains a list of security contacts for each department, college or unit.
Some versions of Linux do not come with a Certificate Authority (CA) certificate that will recognize the University of Minnesota's certificate CA.
What is Don?
Don is what Salesforce calls a full sandbox. That means that it is a complete copy of the production system.
Students at the University of Minnesota can register personal devices for WiFi access even if they don't support WPA2 authentication (username and password).
Troubleshooting Logs
Export information from the VPN client to help locate and isolate a connection problem.
Certain Departmental Pools, Full Tunnel VPN, and Split Tunnel VPN Pools require Two-Factor Authentication (2FA) through
You can send print jobs via WiFi to printers in UMN Computer Labs but first, you need to install the necessary driver.
You can send print jobs via WiFi to printers in UMN Computer Labs but first, you need to install
You can easily print a document from your personal computer by connecting to a U of M print server via CampusCloud Print.
The Pharos Print app enables you to send a document from your mobile device to a U of M print server.
The Pharos Print app enables you to send a document from your mobile device to a U of M print server.
As a student, you are able to print in OIT-managed printing locations using your personal laptop that is connected to the Twin Cities campus
Sometimes even if you've correctly added eduroam to your networks, you may have problems connecting.
Miniport WiFi Adapters are known to interfere with WiFi connectivity for Windows users. If you can no longer connect to the network or your connection is intermittent, check for these adapters and disable them.
This guide will help you to forget your WiFi network. Forgetting a network is often a helpful step when you are having problems connecting to WiFi.
Your android device will automatically find all wireless networks in range. On campus, you will see the following UofM SSIDs (network names): eduroam and UofM-Guest.
Aruba 303H access points are deployed in residence halls across the University of Minnesota Twin Cities campus. These will provide WiFi, and Ethernet access within a particular room.
This article will help you connect a Chromebook to eduroam.
Connecting to eduroam WiFi with Windows on ARM requires additional steps compared to the desktop version of Windows 8.
Linux users can connect to the wireless network using the wireless button in the upper-right of their graphic user interface.
This article discusses connecting departmental Internet of Things (IoT) devices to University WiFi. Often departments, or units will have devices that need access to WiFi.
If you have tried connecting to WiFi and are still having connectivity issues, do
If you have tried connecting to WiFi and are still having connectivity issues, downloading eduroam CAT (Conf
Have you tried everything and still can't connect to eduroam? Downloading the eduroam C
UofM-Guest WiFi Network
Guests on campus may use the UofM-Guest network at no charge.
Visitors from eduroam-participating universities can obtain access t
Your iPhone or iOS device will automatically find all WiFi networks in range. On campus, you will see the UofM Networks: eduroam and UofM-Guest.
Connecting to Campus WiFi
Your Apple computer will automatically find all wireless networks in range.
WiFi Enhancement
To enhance WiFi in your area, please submit a work order through our online
Devices like the Google Chromecast are designed for home networks.
Connecting to Campus WiFi
Your Windows 10 computer will automatically find all wireless networks in range.
This article describes how to configure an Xbox 360 for DHCP.
Resources
This University policy focuses on what you can and cannot do, and where to report violations of acceptable use.
Box Sync and Box Drive are two separate desktop applications that give users the ability to access Box content from the user's desktop environment.
The University of Minnesota (UMN) values the use of information technology in supporting the mission of the University.
A guide to help you correctly identify the security level required for your research data developed by the College of Liberal Arts Technologies and Innovation Services.
Security IncidentsReport suspected security incidents or issues and violations of University security policy to University Informa
Remind yourself and others about safe computing best practices by posting our handout.
Learn to store, sync, and share files with Google Drive.
Article from Google about how to access Google Drive and share and edit Google documents, slides, sheets, forms and drawings from within a Google Video Call (Hangout).
Abbreviated documentation on basics of Google Drive set up and functionality
Google Support document outlining basic and advanced search options in Google Drive. Note: Scroll down and click on Advanced Search options.
Google Support document which outlines process for changing the way documents are shared in Google Drive
LinkedIn Learning instructional video on making changes to your view and the sort order in Google Drive
Google Support document on real time communication with another Google user who is also working on the same Google Drive document
This short video from LinkedIn Learning demonstrates how to convert a file into the Google Doc format.
Google Support information on the creation, deletion and moving of a folder in Google Drive
LinkedIn Learning video instructions on how to delete and recover files stored in Google Drive
Google Workspace Learning Center instructions on how to download and print files from Google Drive
LinkedIn Learning instructional video on the ability to collaboratively edit a single document in Google Drive with another Google user.
Limitations on file sizes in Google Drive
Locate a file if its parent folders no longer exist.
Keyboard shortcut commands for use in Google Drive
Google Workspace Learning Center guide on sharing files or folders with specific people, adding comments and replies, making edit suggestions, and working with suggested edits of Google Documents in Google Drive
Important considerations before moving or deleting information in shared folders.
LinkedIn Learning video guide to funcationality and navigation in the Google Drive application
Google Support document with instructions on recovering a Google Drive document
Google provided information on requirements for using Google Drive.
Google Support site reviews process of searching for files in Google Drive
LinkedIn Learning how-to video on searching for files and folders in Google Drive
LinkedIn Learning instructional video on how to share files from Google Drive with other users of Google
Google Support instructional document on sorting files in Google Drive
Suggesting an edit to others working on the same document
Information on tracking changes made to your files stored in Google Drive
Google Support document giving steps to change ownership of documents stored in Google Drive
LinkedIn Learning video explanation of files compatible for storage in Google Drive
Google Support document with instructions on uploads to Google Drive
LinkedIn Learning video how-to on uploading files to Google Drive
LinkedIn Learning instructional video on using stars to group files in Google Drive
LinkedIn Learning instructional video on the use of a preview lightbox for file searches in Google Drive
Google Workspace Learning Center how-to guide on set up and use of Google Drive
A resource discussing several strategies, such as folder structure and tagging, that can help improve your Google Drive when used with departments or teams.
LinkedIn Learning instructional video on contributing to files shared with you through Google Drive
Google Support document outlining how to convert Office files to Google Doc format
LinkedIn Learning instructional video on the sharing of documents through Google Drive and responding to/adding revisions
LinkedIn Learning video instructions on creation and maintenance of folders in Google Drive
Enable automatic updates of the the Mac operating system and apps you got from the App Store.
The University's Information Security Awareness & Training helps to inform and empower yourself about data and privacy good practices when you use a computer or mobile device.
This University policy provides the information security controls that are required to protect the data and University IT resources, and includes information on how to use the standards and request an exception.
This policy provides information about the Information Security Risk Management (ISRM) program, including identifying and tracking information security risks, developing plans for remediation, and providing guidance o
The SANS OUCH! Newsletters provide more information.
The following laws and regulations are related to information security:
Provides a list of the legitimate online services that are approved by the AAP, MPAA, and RIAA.
The launch page for the University's instance of Box Secure Storage
To access the Moodle systems below, you must be on the University of Minnesota campus network.
This resource from CloudFind provides some best practices for using Google Drive with your team.
The intent of the Gap Analysis process is for units which support IT resources, or individuals who manage their own IT resources, to proactively identify and manage information security risks on an ongoing basis, by analyzing and documenting gaps between their current practices and the required security controls defined in the University's information security standards.
University Policy on how to report information security incidents
Your data are valuable.
Report an Information Security Incident
Report suspected information security incidents immediately to University Information Security (UIS).
Digital Millennium Copyright Act (DMCA) Designated Agent Notification Procedures
Notification of alleged copyright infringement should be directed to:
Call 911 if you fear for your safety.
Report email or other electronic harassment to University Information Security. Send email to [email protected]
If you suspect a potential security issue involving any private information—whether the information is on a computer, on paper, on the web, etc.—immediately report the details to University Information Security
The UReport provides a way for University community members to report violations of rules, regulations and policies. The report can be made anonymously.
Report suspected potential data breaches immediately to University Information Security. Send email with details to [email protected]
University Information Security is available to consult on:
All Service Gateway users should follow the best practices listed below.
All Service Gateway users should follow the best practices listed below.
OIT customers can use Service Gateway, a web-based application, to manage their data network resources. Common uses include the following:
OIT customers can use Service Gateway, a web-based application, to manage their data network resources. Common uses include the following:
We have defined naming conventions for unit identifiers in Service Gateway as described below.
We have defined naming conventions for unit identifiers in Service Gateway as described below.
When traveling abroad, some foreign countries do not allow encryption.
Get a list of the current ports and other things that are blocked at the University's border. You must sign in as a University employee to see these network filters.
University units and community members must ensure their electronic devices and other resources which store, transmit, or process University information meet the information security processes and standards.
Purpose
The following questions will assist units or individuals to review IT contracts or licenses for both cloud-based/off-site or on-premise/locally hosted IT services.
View maps showing wifi coverage for University of Minnesota buildings.
If you encounter a location with poor WiFi connectivity on campus, pin the location on the UMN WiFi Feedback site. Network engineers are alerted, and where possible, take action to improve connectivity.
Self-Help Guides
Box Secure Storage is a cloud storage and collaboration service configured to meet the University security standards for HIPAA data.
The Google Drive self-help guide provides how-to instructions for common tasks such as organizing and finding files and folders, sharing and working together on documents, and downloading and printing files.
User Stories
The benefits of student group work are well documented: