Good Afternoon,
Please forward the message below from the UH ITS department to your instructors and apprentices.
This is the link to set up Multi-Factor Authentication:
Getting setup for Multi-Factor Authentication (MFA) University of Hawaii System
- Click the link in the "How do I sign up for MFA" section (UH username and password required to login).
Please call me if you have any questions.
Thank you.
James
(808) 282-0248
-------- Forwarded Message --------
Subject: Requiring Multi-Factor Authentication for UH Students, Faculty and Staff in Fall 2023
Date: Tue, 16 May 2023 07:30:01 -1000
From: Information Technology Services <announce@hawaii.edu>
The US Department of Education Federal Student Aid Office has notified higher education institutions that the Federal Trade Commission (FTC) amended their Standards for Safeguarding Customer Information (Safeguards Rule) component of the Gramm-Leach-Bliley Act (GLBA).
As part of these updated GLBA requirements, and to protect personal information of consumers, Information Technology Services (ITS) will be requiring all active students, faculty and staff to enable Multi-Factor Authentication (MFA) to access University resources. We plan to implement this change on October 2, 2023. This date avoids disruptions to the beginning of the Fall semester. Thereafter, MFA will become mandatory for all active students, faculty, and staff.
For more details on the changes to GLBA and how it impacts higher education institutions, see:
Updates to the Gramm-Leach-Bliley Act Cybersecurity Requirements | Knowledge Center
The new GLBA requirements are beneficial. UH has been experiencing ongoing brute force and credential stuffing attacks* by cyber criminals attempting to gain access to your UH username. Since January 1, 2023 we have averaged 20.5 attacks a month, resulting in over 52,000 login attempts in which over 49,000 users have been targeted that resulted in 35 successful logins. Duo MFA provides additional protections from unauthorized access to your UH username. It has been available as an optional service since 2016.
Additional information will be sent out as the date of implementation gets closer. If you have any questions, comments, or feedback, please contact: infosec@hawaii.edu.