Page Comparison

🎓 Purpose

Security alerts and advisories inform you of possible vulnerabilities to your research system or project and can provide you with recommended mitigations and solutions to secure your work. 

👥 Audience

🔖 Contents

Initial considerations

Maintain an asset inventory.

• Maintain a device and service inventory so you are aware if alerts and advisories are relevant to your systems.

  • Asset management; data and devices

Patch and update frequently.

• Ensure that you are regularly (or ideally, automatically) updating and patching your systems, in addition to other practices to maintain a secure system.

  • Self-managed devices

\uD83D\uDCD8 What can I do?

Visit Security Matters for issues relevant to the U of T community.

• https://securitymatters.utoronto.ca/

Visit Alerts and Advisories by the Canadian Centre for Cyber Security.

• https://www.cyber.gc.ca/en/alerts-advisories

Visit and subscribe to Alerts by the Cybersecurity & Infrastructure Security Agency (US).

• https://www.cisa.gov/uscert/ncas/alerts

• Alerts and advisories often link to the Known Exploited Vulnerabilities (KEV) catalogue, which is an authoritative source for vulnerabilities that have been exploited.

  • https://www.cisa.gov/known-exploited-vulnerabilities-catalog