[LIBRARYDIR] [EXTERNAL] - Re: Ransomware plan?

Thu Jun 16 13:17:39 PDT 2022

Here is the response I got about SBCTC involvement:

The SBCTC has advocated for increased funding specifically for
cybersecurity. Through them we  have discounted access to some services and
tools for mitigation. They have been instrumental in helping colleges
continue operations during an attack as well as offering an immense amount
of support to recover.  A member from the SBCTC attends the state ITSECC
meetings.  However, addressing malware, as in prevention and protection,
is the responsibility of each college.  SBCTC will help remediate after an
infection.

*Claire Murata, MLIS*
Associate Dean, Library and Learning Resources
20000 68th Ave. W., Lynnwood WA 98036 | edmonds.edu
claire.murata at edmonds.edu | (425) 640-1522

[image: college logo]

On Thu, Jun 16, 2022 at 8:29 AM Guidry, Wade via LIBRARYDIR <
librarydir at lists.ctc.edu> wrote:

> I’ll add a few other thoughts to what a Ransomware plan for the library
> might contain:
>
>
>
>    1. First response actions – What immediate actions does the department
>    take when a ransomware alarm goes out? Turn off computers? Close
>    immediately? Log out of everything?
>
>    First response actions should be determined by IT. But probably need
>    to be carried out by departments.
>
>    2. Understanding how a ransomware event might impact your use of
>    cloud-based services.
>
>    Hosted platforms (Alma / Primo, Koha, Horizon, EZProxy, LibGuides,
>    CONTENTdm, Google Scholar, OCLC services, Canvas, etc) will fall outside
>    the impact zone of a Ransomware event. But the way you navigate to them
>    (DNS) and the way you authenticate to use them (campus authentication
>    platforms) might be affected. You need a plan for navigating to and
>    authenticating to hosted platforms when campus infrastructure goes down.
>
>
>
>    1. Off-campus / Cloud backups of critical library files – This one is
>    straightforward. Files and digital assets critical to library continuity
>    (financial, statistical, collection-related) should be regularly backed up
>    to an off-campus or cloud location. Many of the institutions already use
>    commercial cloud-based services (office 365, Google Apps) for
>    administrative purposes. So, this one may already be in place or easily
>    implemented.
>
>
>
>    1. Ability / Capacity for employees to work from home, and an
>    understanding what work can and cannot be performed during a Ransomware
>    event.
>
>
>
>    1. Staff communications during a Ransomware event, since email may be
>    the first thing to go.
>
>
>
> And just a general question, what is SBCTC’s role in this discussion, if
> any?
>
>
>
>
>
> Wade Guidry
>
> Library Consortium Services Manager, WACTCLC
>
> wadeg at bigbend.edu
>
> (509) 760-4474
>
> http://www.wactclc.org
>
>
>
> *From:* LIBRARYDIR <librarydir-bounces at lists.ctc.edu> * On Behalf Of *Jacquelyn
> Ray via LIBRARYDIR
> *Sent:* Wednesday, June 15, 2022 4:13 PM
> *To:* WACTC Library Directors <librarydir at lists.ctc.edu>
> *Cc:* Jacquelyn Ray <jacquelyn.ray at wwcc.edu>
> *Subject:* Re: [LIBRARYDIR] [EXTERNAL] - Re: Ransomware plan?
>
>
>
> *CAUTION:* Originated outside our network. Do not click links or open
> attachments unless you validate the sender.
>
>
>
> Awesome, Erica!  I just saw this after I sent my thoughts~
>
>
>
> All my best,
>
> Jacquelyn
>
>
>
> Jacquelyn Ray, MLIS, MA | Director of Library Services, FYE & Interim
> Director of Continuing Education| she/her
>
> Walla Walla Community College
> *Need help evenings or weekends? Try our **24/7 Ask-a-Librarian Chat
> Service!
> <https://askwa.libanswers.com/widget_chat.php?hash=d266f8c192e1c15230f3b8f764dcead2>*
>
>
> *“Be kind whenever possible. It is always possible.” ~Dalai Lama*
>
>
>
>
>
>
>
> <https://askwa.libanswers.com/widget_chat.php?hash=d266f8c192e1c15230f3b8f764dcead2>
>
>
> ------------------------------
>
> *From:* LIBRARYDIR <librarydir-bounces at lists.ctc.edu> on behalf of Coe,
> Erica via LIBRARYDIR <librarydir at lists.ctc.edu>
> *Sent:* Wednesday, June 15, 2022 1:09 PM
> *To:* WACTC Library Directors <librarydir at lists.ctc.edu>
> *Cc:* Coe, Erica <ecoe at olympic.edu>
> *Subject:* Re: [LIBRARYDIR] [EXTERNAL] - Re: Ransomware plan?
>
>
>
> CAUTION: This email did NOT originate from WWCC. Do not click links or
> open attachments unless you validate the sender and know the content is
> safe. If you are unsure, contact the Help Desk at x4357 or email
> helpdesk at wwcc.edu
>
> I agree with Tim, but we do need to consider continuity of operations for
> our specific services.
>
>
>
> A few starting places:
>
>
>
> Developing a library service continuity plan focused on digital services
> and cybersecurity
> <https://www.timeshighereducation.com/campus/developing-library-service-continuity-plan-focused-digital-services-and-cybersecurity>
>
>
>
> Awareness, Planning, Resilience: Thoughts on Libraries’ Cyber Defense in
> 2020
> <http://blogs.ifla.org/lpa/2020/03/27/awareness-planning-resilience-thoughts-on-libraries-cyber-defense-in-2020/>
>
>
>
> ALA Library Disaster Preparedness & Response
> <https://libguides.ala.org/disaster/home>
>
>
>
> This would be a great professional development offering for next year.
>
>
>
> Thanks,
>
> Erica
>
>
>
>
>
> *From:* LIBRARYDIR <librarydir-bounces at lists.ctc.edu> *On Behalf Of *Susan
> Schreiner via LIBRARYDIR
> *Sent:* Wednesday, June 15, 2022 1:05 PM
> *To:* WACTC Library Directors <librarydir at lists.ctc.edu>
> *Cc:* Susan Schreiner <susan.schreiner at ghc.edu>
> *Subject:* [EXTERNAL] - Re: [LIBRARYDIR] Ransomware plan?
>
>
>
> CAUTION: This email came from a non-OC system or external source. Beware
> of phishing and social engineering!
>
>
>
> Kind of my thought too. Other than listing all service providers and
> having these contacts and their information maintained in an off-campus
> computer, and maybe doing backups that are stored off the main system, what
> else can we be doing for this scenario?
>
>
>
> Susan A. Schreiner
>
> Associate Dean for Library, eLearning, and Learning Support Services
>
> Grays Harbor College
>
> Aberdeen, WA 98520
>
>
>
> *From:* LIBRARYDIR [mailto:librarydir-bounces at lists.ctc.edu
> <librarydir-bounces at lists.ctc.edu>] *On Behalf Of *Fuhrman, Tim via
> LIBRARYDIR
> *Sent:* Wednesday, June 15, 2022 1:00 PM
> *To:* WACTC Library Directors <librarydir at lists.ctc.edu>
> *Cc:* Fuhrman, Tim <timf at bigbend.edu>
> *Subject:* Re: [LIBRARYDIR] Ransomware plan?
>
>
>
> Wouldn’t that be what we have THEM for?
>
>
>
> ______________________________________________________________
>
> *Tim Fuhrman*
>
>
> *Director of Library Resources & eLearning*
>
> *Big Bend Community College*
>
> *timf at bigbend.edu* <timf at bigbend.edu>
>
> *509.793.**2350*
> * 877.745.1212*
>
> *www.bigbend.edu
> <https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.bigbend.edu%2F&data=05%7C01%7Cecoe%40olympic.edu%7C6267c4c2209142f0479808da4f0a614f%7C5089378aab1544c0b1bad4f21ccc3085%7C1%7C0%7C637909203265828901%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=mUlmtqrnLdITVMT53qXihELyfJ41OTnOa%2B9W70vIK7w%3D&reserved=0>*
>
> *Bonaudi Library (ATEC/1800 Building)•7662 Chanute Street NE•Moses Lake,
> WA 98837-3299*
>
>
>
>
>
> *From:* LIBRARYDIR <librarydir-bounces at lists.ctc.edu> *On Behalf Of *Claire
> Murata via LIBRARYDIR
> *Sent:* Wednesday, June 15, 2022 12:37 PM
> *To:* WACTC Library Directors <librarydir at lists.ctc.edu>
> *Cc:* Claire Murata <claire.murata at edmonds.edu>
> *Subject:* [LIBRARYDIR] Ransomware plan?
>
>
>
> *CAUTION:* Originated outside our network. Do not click links or open
> attachments unless you validate the sender.
>
>
>
> Hi all,
>
>
>
> I hope your spring quarter is wrapping up well for you and your students!
>
>
>
> Does your library have a plan for what to do if there is a
> ransomware attack? Our IT department has told everyone to make a plan, and
> I thought I would start with this group. Thanks in advance for your help,
> and if it's easier to talk than write, I would be happy to set up a call!
> Take care, Claire
>
> *Claire Murata, MLIS*
> Associate Dean, Library and Learning Resources
> 20000 68th Ave. W., Lynnwood WA 98036 | edmonds.edu
> <https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fedmonds.edu%2F&data=05%7C01%7Cecoe%40olympic.edu%7C6267c4c2209142f0479808da4f0a614f%7C5089378aab1544c0b1bad4f21ccc3085%7C1%7C0%7C637909203265828901%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=2hAL%2FMhlrMhuNYr4Pb%2FsmCtGVGIB%2FcnobIKtIY2OrPo%3D&reserved=0>
> claire.murata at edmonds.edu | (425) 640-1522
>
> [image: Image removed by sender. college logo]
> _______________________________________________
> LIBRARYDIR mailing list
> LIBRARYDIR at lists.ctc.edu
> http://lists.ctc.edu/mailman/listinfo/librarydir_lists.ctc.edu
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ctc.edu/pipermail/librarydir_lists.ctc.edu/attachments/20220616/4d0b7b70/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 5850 bytes
Desc: not available
URL: <http://lists.ctc.edu/pipermail/librarydir_lists.ctc.edu/attachments/20220616/4d0b7b70/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 407 bytes
Desc: not available
URL: <http://lists.ctc.edu/pipermail/librarydir_lists.ctc.edu/attachments/20220616/4d0b7b70/attachment-0001.jpg>