Boston University Information Security’s

Security Hero Program

PROGRAM OVERVIEW: The Security Hero Program is a designation awarded by Boston University’s Information Security Team in order to recognize outstanding efforts in the protection of University data and the defense of the Boston University community’s cybersecurity.

PROGRAM MISSION STATEMENT: The Security Hero Program’s mission is. to recognize and honor our community’s commitment to taking an active role in the cybersecurity of the University. Cybersecurity relies on “people, process and technology.” The Security Hero Program aims to educate, encourage, promote and partner with the people of our community in order to foster a well-rounded cybersecurity environment for our organization.

PROGRAM DETAILS: The Security Hero Program merit is awarded throughout the year based on the interaction between community members and BU’s Information Security Team. The Security HeroProgram is open to all members of the Boston University organization including faculty, staff and students. Recipients will be notified via email and presented with the Security Hero pin, award and official letter of distinction.

October 2020 Inaugural Recipient: Nedra Abbruzzese-Werling

WHY NEDRA IS A SECURITY HERO:

As the leader in identifying and reporting phishing emails, Nedra has stopped the propagation and spread of scams and reduced the risk of compromised accounts and possible data breaches for our BU community. Phishing remains the number one source of cyber-attacks and breaches globally, as well as here at Boston University. During this time, our prolific use of online technologies has led to a sharp increase in opportunities and advantages for cyber criminals. We commend Nedra for taking an informed an active role in protecting University assets.

WHAT SHE DOES HERE AT BU AS VICE PRESIDENT FOR COMPLIANCE:

The Compliance Services Office works with compliance partners across the University to clarify compliance obligations; coordinate compliance activities; support training and other educational efforts; investigate compliance concerns; and help identify, assess and mitigate risks. The Compliance Services office manages the Compliance website, the University-wide Policies website, oversees compliance with the Conflict of Interest Policy, participates in the University’s Enterprise Risk Management (ERM) efforts, and oversees and facilitates the University’s anonymous Ethics and Compliance Hotline.

THANK YOU NEDRA!