Skip to main content

Cornell University

Content (1168)

Keeping Your Devices SafeNever leave anything unattended in a public area, in a shared living space, or visible for potential intruders. Use physical locking devices or take them with you.Use an inconspicuous protective bag or case to carry your laptop and other devices.
Cornell NetID Password Change LinksHow to change your NetID passwordForm to choose a new password for your NetIDWhy Strong, Recently Set Passwords are ImportantDue to prevailing cyber threats and recent incidents, password protection was enhanc
Best practices for everyone (students, faculty, and staff): Although these are requirements for employees handling sensitive information, it is also good practice to configure all devices in this way for extra protection against loss or theft.Definition of mobile handheld devices: …
If your NetID password is stolen and your NetID is used to send email spam, there can be a number of warning signs:
Cornell is phasing out the use of security questions in favor of setting a recovery email address to reset forgotten or lost Cornell NetID passwords. Please visit Set a NetID Recovery Email for more details.If you:
1. Report the incident to the IT Security Office. Don’t hesitate. Any possible or confirmed theft of a NetID password needs to be reported immediately to the IT Security Office via security-services@cornell.edu. You should also notify your department’s technical support staff.
Keeping your personal information, Cornell sign-in credentials, and important data safe means protecting your passwords. Anyone with active online accounts encounters dozens of passwords used to access Cornell resources, personal online banking, e-commerce sites, and other websites. Below you will…
You are tricked into giving away your NetID passwordThese days we are overwhelmed by fraudulent email messages and websites that try to steal personal information. These are often referred to as “phishes.” A common trick is to suggest that one of your accounts will be shut down unless you reply…
If you use a Cornell-managed computer or device, review the information below step 4 before you start. Change your NetID PasswordTo change your password:
The standard confidential data scan scenario is one person scanning one computer that contains one hard disk. In that case, the search and remediation process is straightforward, with few challenges or pitfalls. Unfortunately, the majority of computing environments on campus do not fit that…
Some jobs are far more likely to access and store confidential data than others. Knowing which ones can help you prioritize data cleanup.Important: Regardless of their role, people who have ever done any of the following probably have confidential data on their computer.
Whenever possible, we recommend not storing confidential data on your computer. If you have a need to store confidential information on your computer temporarily, consult with your technical support team. You must:
Not sure what high-risk data is? See Data types (High Risk, Moderate Risk, Low Risk).
In certain settings, e-mail software can store some or all electronic mail in files on your computer. This speeds access to e-mail, reduces the workload on mail servers, and allows you limited work even if you don’t have a network connection. Saved electronic mail also presents some unique…
After running a data discovery tool such as Identity Finder, the next step in the data discovery and clean up process is to decide how to handle each positive hit. Following is an explanation of common scenarios and the remediation options available in Identity Finder to handle each one.
If you haven't already reported the incident, do so now.
Whenever possible, we recommend using Cornell's FREE R5 service to safely destroy media.
Report incidents immediately.Send an email to itsecurity@cornell.edu.If you require urgent assistance, please contact the IT Service Desk.
If you haven't already reported the incident, do so now. Work with technical support to contain the system (as outlined below) while you gather and provide incident details to the IT Security Office. Do not Scan the system with antivi
To better safeguard the university's IT and data resources, the IT Security Office strongly recommends that all Cornell departments and units implement the following practices.

At Cornell we value your privacy. To view
our university's privacy practices, including
information use and third parties, visit University Privacy.