Cybersecurity Hub

Who has to take training?

 Although IT services has a top notch cybersecurity team using the latest technology, for the most part it can only identify and stop known threats. Like other institutions, we have to rely on our employees to be our first line of defense against unknown threats. To ensure our employees have the skills they need to be an effective defense, we mandate annual cybersecurity training for anyone who has a significant impact on the network. This training ensures that employees can keep themselves, their families and the University safe from cyberattack. 

Mandatory training is enforced by your supervisor. They will receive training status reports for their teams quarterly. They are also required to report completion of the training as part of the annual Position Hazard Assessment. Read on to find out if you are required to take cybersecurity training.


All employees including contractors and contract instructors are required to complete cyersecurity awareness training upon hire and annually. What is covered in the training varies depending on your role. HR, Finance, Payroll, Supply Chain, executives and those who handle payment card data are required to complete specialized training that is only availlable through online cybersecurity awareness training.  All other employees can take either the online training or a cybersecurity awareness workshop to meet their training requirement.

Your training status is stored in your training proflile in our Security Edcuation Platform. Therefore even if you choose to take a workshop, you must enroll in online training first. Once you complete your workshop your training profile will be manually updated to show your mandatory training has been completed and your online training assignment will disappear.

The training is updated every year with the old training course taken down and archived on June 30 and the new course posted on July 1. If you are on leave, you are not required to take the training until your return.  


Alumni are not required to take cybersecurity training but would like to improve their cybersecurity knowledge are welcome to attend a cybersecurity awareness workshop.