SDU enhancing IT-security

Unfortunately, the number of cyberattacks against companies and businesses and organisations is increasing. The Wannacry attack during the Danish holiday, General Prayer Day, and the attack against a large group of European companies last week is but the latest examples.

We must protect ourselves as best we can against the risks posed by attacks, and therefore the Executive Board has decided to introduce new measures to strengthen SDU’s IT security.

University director Thomas Buchvald Vind explains:

-This means that from now on, you may experience stricter requirements when you log on to our systems. At first, it may seem a bit laborious, but I would like to emphasize that the new requirements are being implemented to protect you and your user account against misuse.

You can read about the changes that IT service is introducing. If you have questions about IT security and the new measures, you are always welcome to call the service desk.

You can also find good advice about IT security and recommendations for passwords here: http://www.sdu.dk/it-sikkerhed

Facts: Stricter requirements for passwords and logging in

One new measure is stricter requirements for passwords. The next time you must change a password, 12-characters will be required. On the other hand you’ll not have to change your password regularly any more.

Another measure is the introduction of a two-factor authentication; that is, two factors must be used to log in to SDU’s systems. First for Sharepoint, CRM and Onedrive.  We will attempt to obtain one of the factors automatically when you access the university’s IT systems From SDU’s IT network. It is the normal working situation, and in normal circumstances you will just have to enter your user name and password the way you usually do.

If you try to access SDU’s IT systems from a computer that is not connected to SDU’s IT network or a service outside of the university, as a precaution, we will ask you for more information.  This may be a code that you have been sent via SMS messaging, a phone call to you or the entering of a code that is displayed in a special app on your smartphone. You may also be asked for this further security if the system registers abnormal use of your account.

In order to implement the extra security of your user account, the first time you will be asked to enter further information. A picture will automatically be displayed, and you will be asked to configure further security checks. Then you must press the Configure button and enter further security checks. These may consist of a mobile phone number, an alternative telephone number or a message asking you to install an app in your smartphone. It is not a requirement that you have a mobile phone because you can choose to enter your telephone number in the alternative telephone number field. The tel. no. (work) field is locked.

Information meetings will be held currently. Watch livestream video from the first meeting here