Cyber security is everyone's responsibility

Whilst Griffith utilises sophisticated tools to protect the University, people are the first line of defence in today’s cyber threat landscape.

Explore our cyber safety advice and tips; and learn how to report cyber security incidents.

Cyber Action Month

Cyber security is something we all play a part in. Cyber Security Action Month this October is an opportunity to build simple habits that help keep ourselves, our information and our community safer online.

Throughout the month, we will share practical advice to help you recognise cyber risks and take action to protect yourself, whether you’re working, studying or at home.

Complete the four checks below during Cyber Action Month to improve your cyber security.

1. Have you completed your annual Cyber Security Essentials Training?

All staff users of Griffith IT Systems and data are responsible for participating in annual awareness training. This includes executive, academic, general, continuing, fix term, casual and contracting staff. You'll be reminded when it's time to complete your training.

Cyber Security Essentials Training (staff only)

3. Are all your accounts secured by strong and unique passwords?

Passwords and passphrases are the first line of defence to protect your information. They should not only be long, but also memorable and not reused for different services. Learn more about best practices for securing your accounts with strong passwords.

How to create a strong password

2. Have you set up Multi-Factor Authentication?

Multi-Factor Authentication (MFA) is an essential tool against cyber attacks targeting educational institutions, businesses and individuals. Using MFA at Griffith is a requirement, but you may like to consider using a MFA platform on your home accounts as well.

Find out more (staff only)

4. Are all your devices up to date?

System updates not only provide new features, the main benefit is to protect your data against vulnerabilities by patching security flaws and fixing bugs. When you see an update, make sure you apply it in a timely manner.

Important Software updates

Five cyber security essentials

Find resources to protect yourself, your data and contribute to a safe cyber environment.

Cyber Security Alerts

Connect with trusts sources to stay up-to-date with the latest cyber security news, threats and advisories.

  • Scamwatch: Scamwatch is run by the National Anti-Scam Centre to collect reports about scams to help us warn others and to take action to stop scams.
  • National Office of Cyber Security:  The National Office of Cyber Security work closely with industry and critical infrastructure operators to build a cyber-resilient Australia.
  • Queensland Government Cyber Security Community: Resources available to use at home and in your communuty, designed to keep your information secure online.

Report a security incident

Report a phishing incident, password compromise, ransomware or other suspicious activity.

Information management for staff

Learn more about information security classification (formerly data classification), data privacy, the information asset register and information storage advice. Requires staff login to access.

Find out more

Information security classification Data privacy Information Management

Information asset register (public) Information asset register (internal)

Cyber security policy

Explore the policies, standards and guidelines to help navigate your cyber security requirements as part of Griffith community.

See policies

Need help?

General enquiries

Access the Service Catalogue to see the full list of cyber security services available.

Or you can ask our friendly staff about IT products and services. Contact us by phone, email or chat.

IT support chat

IT support form

Service Catalogue

(07) 3735 5555 Brisbane

(07) 5552 5555 Gold Coast

Cyber Security Essentials Training for staff

As part of the Griffith Integrity Program, the Cyber Security Essentials training module aims to build awareness of responsibility, key threats, mitigation actions and incident reporting.

The training will take approximately 30 minutes to complete. At the end, an online assessment will check your understanding of the key concepts.

The training module should be completed by all new staff at induction and annually for all staff.

Get started