Security and Backup

OneDrive Data Backup

Data in computers configured through the Helpdesk will be set to synchronize with OneDrive. OneDrive supports automatic synching of files to OneDrive cloud storage and enables users to restore deleted files and restoring to a previous file version. Every faculty, staff and student has access to 1TB OneDrive space as part of the University Microsoft Office365 (M365) subscription. M365 also hosts other key applications like Email, Teams and Share point. OneDrive is secure and has been approved as recovery tool against ransomware. To learn more about OneDrive, its security and how it works, including recovery of deleted or changed files, please refer to IITS Knowledge Base (UTORid log in is required). Alternatively, please contact IITS Service desk: helpdesk.utsc@utoronto.ca / 416-287-HELP (4357)

Disk Encryption

The University of Toronto's guideline for data encryption requires that personal and other confidential information in electronic form be protected by properly implemented encryption unless it is kept in a secure server environment with appropriately restricted users rights.

View the University of Toronto Provost's Office guideline regarding security and personal information.

Limited Administrative Access

User accounts created by IITS have limited access to minimize the the chance for malware infection. Please contact IITS to install required work-related software or updates.

Windows and Software Updates

Staff computers have been configured to receive updates for the following software on weekly basis:

• Adobe Flash Player
• Adobe Acrobat Reader
• Adobe Shockwave
• Mozilla Firefox
• Internet Explorer
• Microsoft Office
• Windows 10 & 7

 A Dell Kace message will pop up when reboot is required to complete the installation of a software update. 

Advanced Threat Protection (ATP): SafeLinks For Email and Documents and Attachments

As part of an ongoing initiative of the University to secure email accounts, new advanced security features will be applied to the University of Toronto Microsoft 365 (M365) accounts as part of the rollout of Secure U (of T) advanced threat protections. These new features use advanced analytics to proactively identify cyberattacks in order to protect you and your account. This is a phased rollout and groups/individuals will be contacted in advance to notify them of their enrollment.

What advanced security features will be applied to my account?

As part of this update, Secure U (of T) will apply the following security features to your account.

• Safe Links for Email and Documents will check URLs found in your emails and documents to verify that the links are safe to view.
• Safe Attachments will check to see if an attachment is safe to be delivered to your inbox. If the attachment is found to be unsafe, you will receive the email but not the attachment.
• Safe Documents will help you detect unsafe Office documents. When you open a Word, Excel or PowerPoint file, the file will launch in Protected View and automatically verify the document against the latest known risks and threats before allowing you to leave the protected container (e.g. in order to edit the document).
• Anti-phishing and impersonation will alert you to possible phishing attempts by displaying safety tips in the body of suspicious emails that you receive. Spoofed messages (where the From address in an email message doesn't match the domain of the email source) will also automatically be moved to your Junk Email folder. 

These features will be applied to your account automatically when enrollment takes place. Once enrolled in the policy, there will be no impact on your account..

Copier/Multifunction Printer Security

Copiers have a built-in hard drive which stores a digital copy of jobs printed, scanned or photocopied. If you have an end-of-lease copier, please ask the vendor to either secure wipe the hard drive or take it out so IIT may delete the data. 

IITS also helps departments ensure that their new replacement copier has all the new security features such as encryption or on-demand secure wipe.