Free InfoSec Resources

Below are safety guides and walkthroughs created by the InfoSec Team. 

• • Report an Incident
  • Changing Your Password
  • Secure Passwords Guide
  • Multi-Factor Authentication Guide
  • Email Safety Guide
  • Phone, Zoom & Teams Safety Guide
  • Internet Safety Guide
  • Physical Threats Safety Guide

Throughout the campus, you will find posters featuring information security guidance, including best practices, phishing recognition, password hygiene, and incident reporting procedures. While placement of these posters is currently limited, we plan to continuously expand their availability. 

Additionally, we will soon offer the option to view detailed descriptions of these posters and download them for use in your workspace. Materials will be available in multiple formats for print or digital distribution. 

The InfoSec Team aims to provide educational resources, materials, and tools to support the campus community in maintaining secure practices. To request a resource, please send an email to infosec@clark.edu with the following information: 

• • Primary contact details (name, phone number, email).
  • Specific resource(s) you are requesting (infosec awareness posters, training slides, etc.).
  • Intended audience (individual use, department-wide).
  • Primary purpose of the request (educational, compliance requirement, event preparation, personal knowledge).
  • Preferred delivery method (digital files, printed materials, virtual presentation, workshop facilitation).
  • Accessibility requirements or accommodations needed for participants.

The InfoSec Team hosts hands-on sessions throughout the year. No registration is required to attend. For the most up-to-date details, visit Clark College's Event Calendar or the Employee Training and Development Calendar (for staff-focused sessions) and look for events tagged with ‘IS’. While upcoming sessions are currently targeted at staff, we plan to expand our offerings to students within the next year. 

Upcoming Sessions: 

• • Cybersecurity 101: Passwords, Phishing, and Malware, Oh My!: This session is for staff and will be held on Wednesday, August 12th at 1pm during Staff Development Days.
  • Cybersecurity 102: To Label or Not to Label.: This session is for staff and will be held on Wednesday, August 12th at 2:15pm during Staff Development Days.
  • Cybersecurity 101: Passwords, Phishing, and Malware, Oh My!: This session is for staff and will be held on Friday, October 2nd at 10am via Zoom.

Note: For additional information about upcoming sessions, click the link corresponding to your desired session. This will direct you to the calendar page for the event. 

Request a customized cybersecurity training session for your department, club, or team. Our team will tailor content to address specific risks and data handling requirements relevant to your role and responsibilities, from secure coding practices to PII (Personally Identifiable Information) protection and fraud prevention. Sessions may be delivered online or in person. 

To request this service, please send an email using your Clark College email address to infosec@clark.edu with the following information: 

• • Primary contact details (name, phone number, email).
  • Target participants (department, team, or club name and number of people).
  • Primary learning objectives or knowledge gaps to address.
  • Specific topics of interest (phishing awareness, secure coding, PII handling, fraud prevention).
  • Audience familiarity with information security concepts (beginner, intermediate, advanced).
  • Preferred delivery format (online, in-person, hybrid).
  • Available dates and timeframes for scheduling.
  • Session length preferences (30 minutes, 1 hour, 2 hours).
  • Existing training materials or documentation you’d like incorporated or excluded.
  • Accessibility requirements or accommodations needed for participants.
  • Follow-up deliverables desired (Q&A, resources handout, assessment quiz, feedback survey).

Organize a guided tabletop exercise (TTX) for your team to simulate realistic crisis scenarios such as ransomware attacks, data breaches, or physical disruptions. These low-risk simulations help validate emergency response plans, clarify roles, and build preparedness across departments. 

To request this service, please send an email using your Clark College email address to infosec@clark.edu with the following information: 

• • Primary contact details (name, phone number, email).
  • Target participants (department, team, or club name and number of people).
  • Primary objectives for the exercise (test incident response plan, train new staff, learn more about information security).
  • Preferred types of scenarios to focus on (ransomware, insider threat, mixed).
  • Available dates and timeframes for scheduling.
  • Session length preferences (1 hour, 2 hours, half day).
  • Preferred delivery format (in-person, virtual, hybrid).
  • Existing documentation you’d like incorporated (incident response plans, contact lists, escalation procedures).
  • Accessibility requirements or accommodations needed for participants.
  • Follow-up deliverables desired (after-action report, recommendations, training materials).

Access monthly information security newsletters featuring the latest threats, emerging trends, case studies, and actionable tips for Clark College employees. These newsletters keep you informed about campus-wide initiatives, security reminders, and educational highlights. 

By default, all Clark College employees are enrolled in this service. If you are not receiving emails and expect to receive them, first check your spam or junk folder. If the newsletters are not located there, submit a ticket through the IT Service Portal describing the issue. 

In the future, we plan to launch an internal directory containing an archive of previous monthly newsletters and hope to extend distribution to students as well. 

Submit third-party vendor information security review requests through TACC. Our team evaluates vendor safeguards, data handling practices, and incident response readiness prior to onboarding new service providers. Additionally, IT Services will assess software accessibility to ensure compliance with Washington State legislative requirements. 

To initiate this service, visit the IT Service Portal and create a new service request for TACC. You will be prompted to provide the following information: 

• • Requester name
  • Executive Sponsor
  • Key Stakeholder
  • Project Name
  • Requested Completion Date
  • Request Type
  • Description of the benefits to Clark College
  • Description of alignment with Clark College’s strategic plan and objectives

Engage our team to identify information security gaps within your tools and technologies. We will assist you in prioritizing remediation efforts and tracking progress toward compliance standards. 

To request this service, please send an email using your Clark College email address to infosec@clark.edu with the following information: 

• • Team or department name.
  • Primary contact details (name, phone number, email).
  • Overview of your current tools and technology.
  • Scope of systems to be assessed (on-premise, cloud, hybrid, specific business units).
  • Known information security concerns you’d like addressed.

Partner with our team to identify your department's critical functions, assess operational dependencies, and develop step-by-step recovery strategies. These consultations prepare your department to maintain essential operations during disruptions, ranging from minor incidents to major emergencies. This service specifically addresses IT-related disruptions and ensures that all physical recovery plans remain compliant with regulations when sensitive information is involved. 

To request this service, please send an email using your Clark College email address to infosec@clark.edu with the following information: 

• • Team or department name.
  • Primary contact name details (name, phone number, email).
  • Description of current business continuity planning status.
  • Types of potential highest concern disruptions (IT outages, data breaches).
  • Existing documentation or plans (if any).
  • Specific gaps you’ve identified in your current preparedness.

• • Have I Been Pwned: A simple tool to check whether your email addresses or phone numbers have appeared in known data breaches. Free and easy to use for anyone concerned about compromised credentials. (haveibeenpwned.com) 
  • WA Tech Cybersecurity Resources: Washington State Technology Agency's collection of cybersecurity guidance, tools, and best practices. Includes practical resources for both individuals and organizations. (watech.wa.gov/cybersecurity/cybersecurity-resources) 
  • Stay Safe Online: Easy-to-understand tips for everyday users on password management, phishing recognition, and safe browsing habits. (staysafeonline.org) 

• • CISA (Cybersecurity and Infrastructure Security Agency): Official federal advisories on emerging threats, vulnerability databases, and incident reporting guidance. Includes beginner-friendly alerts alongside technical resources. (cisa.gov)
  • FTC Consumer Advice: Practical guidance on identity theft prevention, scam recognition, and filing complaints. Ideal for individuals seeking straightforward, actionable steps to protect personal information. (consumer.ftc.gov)
  • FBI Internet Crime Complaint Center (IC3): Platform for reporting internet-enabled crimes including fraud, phishing, and identity theft. Provides valuable statistics and warning notices. (ic3.gov) 

• • Electronic Frontier Foundation (EFF): Resources for protecting privacy rights and advancing digital freedom. (eff.org)
  • Privacy Rights Clearance: Consumer-focused privacy education, data breach notifications, and resources for protecting personal information. Includes step-by-step guides for various privacy concerns. (privacyrights.org)