The Information Security Office (ISO) helps protect university information, systems, accounts, and data through cybersecurity services, incident response, security awareness, and risk management support. This article provides an overview of ISO services and available support resources.
Overview
The Information Security Office (ISO) supports North Carolina Agricultural and Technical State University by protecting university information, systems, and technology resources. We provide guidance, oversight, and security services that support the institution’s teaching, research, and administrative missions.
The Information Security Office partners with the university community to promote a culture of security, reduce risk, and enable the safe and effective use of technology.
Mission Statement
To safeguard the university’s information assets by providing leadership, guidance, and cybersecurity services that support the institution’s academic, research, and operational goals.
Services
Cybersecurity Governance and Risk Management
Developing security policies, standards, and practices while identifying and managing information security risks.
Security Awareness and Training
Providing education, resources, and outreach to help faculty, staff, students, and affiliates recognize and respond to cybersecurity threats.
Incident Response and Cybersecurity Support
Coordinating the detection, investigation, containment, and recovery of security incidents.
Security Assessments and Consulting
Advising departments and project teams on securely implementing technologies, applications, and business processes.
Identity and Access Security
Supporting the protection of university accounts, authentication systems, and access controls.
Compliance and Regulatory Support
Assisting the university in meeting applicable legal, regulatory, contractual, and policy requirements related to information security and data protection.
Vulnerability Management and Security Monitoring
Identifying, assessing, and helping remediate security weaknesses across university systems and networks.
Data Protection and Privacy Collaboration
Providing guidance on safeguarding sensitive and confidential information throughout its lifecycle.
When to Contact the Information Security Office
Faculty, staff, and students should contact the Information Security Office when you:
- Suspect your university account, password, or multi-factor authentication has been compromised
- Receive a phishing, spam, or otherwise suspicious email and need help reporting it
- Need assistance reporting a known or suspected security incident (e.g., malware, unauthorized access, data exposure, or lost/stolen devices containing university data)
- Require privileged or elevated access to university systems
- Are traveling internationally and need to notify the university or request travel-related security guidance
- Need assistance with research-related data security requirements, including research proposal data management questionnaires
- Are implementing a new technology, application, or business process and need a security assessment or consulting guidance
- Need help interpreting or meeting information security, compliance, or data protection requirements
- Have questions about safeguarding sensitive or confidential university information
- Need security guidance or consultation related to university information resources
Related Services
Use the links below to access related knowledge base articles and service requests: