October is Cybersecurity Month

October is Cybersecurity Month

 

STEP 1

COMPLETE TRAINING

Access the latest CUNY Cybersecurity Awareness Training in Brightspace.

STEP 2

RECOGNIZE PHISHING

Learn how to spot suspicious messages, links, attachments, and QR codes.

STEP 3

PROTECT YOUR ACCOUNT

Use strong passwords, MFA, and secure account practices.

STEP 4

REPORT A CONCERN

Know where to report suspicious email or a possible security incident.

Cybersecurity, the Lehman Way

Our approach connects cybersecurity to Lehman’s culture of service, belonging, innovation, and student success.

People First

Security should help our community learn, teach, work, and connect with confidence—not create unnecessary barriers.

Protect Our Community

One secure choice can protect more than one account. It can help protect classmates, colleagues, University information, and campus services.

Deliver. Lead. Innovate. Secure.

Lehman IT’s commitment to delivery, leadership, and innovation depends on technology that is also trusted, resilient, and secure.


CUNY Cybersecurity Awareness Training


One of the most important actions you can take this October is to complete your current cybersecurity awareness training.

Complete the Latest Course in Brightspace


CUNY provides separate cybersecurity awareness courses for students and employees. The courses are updated to reflect current security threats and best practices and should be completed annually.

Students, faculty, and staff can log in to Brightspace and locate the latest cybersecurity awareness course under the Compliance or Organization tab.

Go to CUNY Brightspace

Why the Training Matters

Helps identify phishing and social engineering attempts.

Reinforces secure password and MFA practices.

Explains how to protect University and personal information.

Provides current guidance as cyber threats continue to change.

Important

Use the current course available in Brightspace rather than old bookmarked training links. CUNY states that the latest cybersecurity awareness course will always be available in Brightspace.


Lehman Cyber Smart: Four Habits for October

Each week, we will highlight one simple action the Lehman community can use to stay safer online—on campus, at home, and on the go.


Cybersecurity Awareness Month Week by Week

 

Use Strong Passwords

Use strong, unique passwords and avoid reusing important passwords across services.

  • Use a unique password for each important account.
  • Consider a reputable password manager.
  • Never share passwords with another person.
  • Change credentials promptly if compromise is suspected.

Use Multi-Factor Authentication

MFA provides an additional layer of protection when an account password is exposed.

  • Never approve an MFA request you did not initiate.
  • Never share verification codes.
  • Review unexpected authentication prompts carefully.
  • Report repeated or suspicious MFA activity.

Keep Software Updated

Security updates help address vulnerabilities attackers may attempt to exploit.

  • Enable automatic updates when available.
  • Update operating systems, browsers, and applications.
  • Restart devices when needed to complete updates.
  • Avoid unsupported or obsolete software.

Recognize and Report Phishing

Pause before responding to unexpected messages, links, attachments, or QR codes.

  • Messages creating urgency or fear.
  • Requests for passwords, personal information, money, or gift cards.
  • Unexpected attachments or links.
  • Sender addresses that do not match the organization claimed.
  • Unsolicited job, personal-assistant, or payment offers.

Your Lehman Cybersecurity Toolkit

Start with Lehman’s familiar technology services, with CUNY resources available when University-wide guidance or training is needed.

CUNY Information Security

University-wide security awareness, advisories, policies, training, and resources.

Visit CUNY Info Security

CUNY Security Best Practices

Review the cybersecurity practices CUNY expects members of the University community to follow.

Review CUNY guidance

Lehman IT Policies & Advisories

Access Lehman technology policies, security advisories, and related information.

Visit Lehman IT Policies

Report Suspicious Activity

If something looks suspicious, report it promptly. Early reporting can help protect you and the wider Lehman community.

Suspicious Email or Phishing

Lehman advises users to report suspicious email to spam@lehman.cuny.edu. Do not simply forward the message; send the suspicious message as an email attachment so IT Security can analyze it.


Email: spam@lehman.cuny.edu

Account, Device, or Other Security Concern

  • Contact the Lehman IT Service Desk.
  • Use LehmanQ for technology support.
  • Change your password immediately if you believe an account is compromised.

Lehman IT Support