Read best practice and tips

Learn practical cyber security tips and best practices that will help you safeguard your personal and institutional data.

  • Students collaborating in a computer lab.

    August 7, 2024

    Here’s how you can learn more about information security and gain practical experience without starting your education or career from scratch.

  • A person interacting with personal and secure data.

    August 7, 2024

    Data classification is a foundational step in determining how your research data should be protected to reduce the risk of data and intellectual property loss. Resources created by the Research Information Security Program are available to help you make informed cyber security decisions about your data.

  • A graphic depicting internet fraud via phishing which can use lost of private information and money.

    August 6, 2024

    Find out how to detect internet fraud and stay safe online with these expert insights from Andrew Wagg, Manager, Incident Response and Alex Lu, Incident Response Specialist at U of T.

  • A laptop computer got attacked by ransomware.

    July 25, 2024

    Ransomware can have a significant impact on an organization – from shutting down operations to the loss of years of research data. That’s why it’s critical for the U of T community to understand the risks and know how to prevent ransomware attacks.

  • Online shopping

    July 15, 2024

    As technology advances and consumers become more connected online, shopping on the internet is becoming an increasingly common way to purchase gifts and everyday items.

  • Hands holding mobile phones that are secured by MFA.

    July 12, 2024

    Multi-factor authentication (MFA) is essential to secure your accounts. It’s quick to set up, easy to use and improves security. With MFA enabled, you can shop, play and work online with confidence.

  • A clock beside the text, "Tax time"

    March 14, 2023

    A tax scam is when a fraudster poses as an authority figure, usually as a CRA or Service Canada agent, to try to scare people into complying with their demands. These scams are designed to frighten people into engaging with the fraudster to make payments via money service businesses, pre‐paid cards, gift cards or Bitcoin.

  • Alerting user there's a phishing attempt

    September 29, 2022

    Protect your accounts and your data from phishing by following these tips to identify and report phishing attempts.

  • January 26, 2022

    While email is one of the most efficient and prevalent forms of communication today, it brings with it the risk of privacy breaches when sharing sensitive data, such as personally identifiable information (PII) or personal health records.