Skip to header Skip to Content Skip to Footer
Person using a keyboard and mouse with the UNCW logo in the background and red computer light shining on the devices.
img_30

IT Security

IT Security

IT Security is charged with safeguarding the confidentiality, integrity, and availability of all information processed, stored, or transmitted using university electronic resources.

Keeping Information Safe

At UNCW, we safeguard all electronic information by:

  • Providing comprehensive information security awareness and training.
  • Ensuring compliance with all federal, state, and local legislation relative to information security.
  • Developing, promoting, and reviewing UNCW information security policies.
  • Conducting frequent information security inspections, audits, and assessments.
  • Taking proactive measures to counter threats, vulnerabilities, and cyber-attacks.
  • Reviewing Disaster Recovery/ Business Continuity plans and testing them via drills and exercises.
  • Facilitating the ITS change management program.
  • Conducting timely investigations and responses to computer security-related incidents.

Notification: IT Security Update to Open Authorization (OAuth 2.0)

What Is OAuth 2.0?

OAuth 2.0 is an authorization protocol websites or applications use to access information from other apps. If you have used applications, such as Zoom or Adobe, which use your UNCW username & password to log in, then you have utilized OAuth 2.0.

What is Changing? 

Beginning February 28 at 8 a.m., IT Security will block new OAuth 2.0 applications in order to prevent potential cybersecurity risks and incidents. 

  • Current OAuth 2.0 connections will not be affected to ensure university operations continue unimpacted. These include applications such as Zoom, Adobe and many others.
  • UNCW accounts will no longer be capable of connecting to new 3rd party applications via OAuth 2.0.
  • If you believe a work-related exception is necessary for new 3rd party applications, please submit an OAuth Approval Request.   

If you have questions about the difference between current and new OAuth 2.0 applications, please email us at ITSecurity@uncw.edu. We're here to help.

What Are Some Examples of Oauth Risks?

  • If someone gains access to your account, they could use OAuth 2.0 to access all the systems/apps connected to your account.  
  • Malicious apps commonly pretend to be legitimate ones, tricking you into giving them access to your data. 
  • Even trusted apps can cause security problems via OAuth 2.0. Malicious individuals can exploit flaws in their code to manipulate OAuth 2.0 permissions. 

If you have any questions or require further assistance, please contact ITSecurity@uncw.edu.  

Incident Response

IT Security is responsible for Computer Security Incident Response, including:

  • Response to campus security incidents and threats, including viruses, worms, and other system compromises.
  • Assistance with investigations initiated by UNCW police, the university auditor, University Counsel and other internal and external authorities.

Have you received a suspicious email? Please forward it to phishing@uncw.edu for evaluation.

phishing@uncw.edu

Security Services and Technologies

  • Vulnerability Scanning Service - Remote scanning of campus computer systems to detect vulnerabilities.
  • Network Monitoring - Watching for anomalous traffic and compromised systems on the campus networks.
  • Client Security - Deployment of anti-virus and other security-related desktop system software for campus-wide use.
  • Security Consulting - Assessing IT security in both central and college departments and assisting in the development of local architectures and solutions.

Report an IT Security Incident

Please report threats or incidents involving someone’s personal safety (e.g., cyber stalking, harassment, etc.) to Campus Police. 

Please report to IT Security Team via email itsecurity@uncw.edu. 

Please follow these instructions:

  1. Please submit a ticket through the myTAC portal
  2. File police report with proper jurisdiction (if appropriate) 
  3. Notify your manager

Please forward the email or report the issue to phishing@uncw.edu. 

IT Security Policies

07.300.00 Information Security 07.300.00 Information Security
07.300.01 Identity and Access Controls 07.300.01 Identity and Access Controls
07.300.02 Operational Security 07.300.02 Operational Security
07.300.03 Physical and Environmental Security 07.300.03 Physical and Environmental Security
07.300.04 Cryptographic Security 07.300.04 Cryptographic Security
07.300.05 Incident Response 07.300.05 Incident Response
top