Leaving a computer logged on and unattended, or leaving a computer unattended in a public area. Loss or theft of any type of computing device.

A large majority of phishing attacks occur via email but increasingly Griffith University is seeing attacks via vishing (phone calls) and smishing (SMS or Instant Messaging based). Attacks can also occur via social media or other social engineering methods. If you receive a malicious email or fall victim to these types of attacks they must be reported. For more information on these types of incidents you can visit our phishing and ransomware site.

Sending sensitive information to the wrong person, losing a USB or other portable device with sensitive information, observing that sensitive information can be accessed without appropriate access controls.

Leaving passwords in plain view of others, unintentional disclosure of passwords (e.g., via phishing victim, etc.), sharing of passwords, passwords hard coded into systems without appropriate encryption. For more information about password best practices you can visit our passwords site.

Denial of Service (DOS) attack such as large amounts of traffic disrupting access, other attack type on Griffith University network system.