HIPAA Security- Social Engineering

You notice that a strange email was sent from your LSU email account. Select the most appropriate response(s): a. Call your co-workers over so they can see b. Contact your computer supporter or Help Desk c. Delete the email and forget about it d. Change your password immediately e. Both B and D

B and d

An individual you've never seen before identifies himself as an auditor and requests that you copy some files onto his thumb drive. You should:

Direct the individual to the Office of Compliance Programs who will be able to assist him with his request.

In the Can You Spot the Phishing Email? exercise, who sent the actual phishing email?

Martha Jones

In the vishing demonstration video, what did the hacker do to distract the target of her vishing scam?

Played a recording of a crying baby in the background

You receive an email. The sender is "IT Department". It states the network is being upgraded. You are told to click on the link in the email and enter your user name and password to continue using the network. What should you do?

Send the suspicious email as an attachment to [email protected]

Jon Pertwee in Facilities says he is working on the parking exit gates and asks you for a report on all the people who paid the daily rate for parking. That report has credit card information. You should:

Tell him you will obtain permission to release the information from your supervisor but that he needs to request access to the information through his supervisor.

In Scenario #1, what are some other things that betray the fact that the email is not genuine? a. The From address does not end with lsuhsc.edu b. The email is signed "HR Department" instead of with a person's name. c. A "private document" was sent to "All faculty and Staff" d. The email asks you to log into Self Service e. a, b, and d f. a, b, and c

A, b, and c

Your job requires you to travel to different sites with your laptop on a regular basis. To keep your laptop secure, you should: a. Invest in a hardened laptop case that cannot be pried open. b. Encrypt the hard drive. c. When traveling in the car, keep the laptop locked in the trunk. d. Set an idle timeout that locks the computer after a fixed period of inactivity. e. All of the above.

All of the above

You receive the following text message on your phone: "Congratulations! You have successfully enrolled in CheatingSpouses.com at the low rate of just $100 per month. If you did not enroll in CheatingSpouses.com please click on the link to disenroll. https://www.whatwasithinking.com " You should:

Delete the text message. It is a form of Smishing trying to either get my username and password or install malware on my phone.

You're in the store picking out a Valentine's Day card when your phone rings. "This is Rose Tyler in Payroll at LSUHSC-NO. For some reason, the IRS is rejecting the upload of your 1095-C. I think a couple of digits on your SSN were reversed. I need you to update your W-4 information using the link I'm getting ready to email you or you'll owe a penalty for not having health insurance coverage. I'm sending an email right now with everything you need." It arrives shortly and looks in order. You should:

Thank her and hang up. Then call Rose Tyler using the number in the university's global address list. Confirm everything before taking any action.