Search Information Security site

 

Education & Training

UVA Employee - Information Security Awareness Training (ISAT)

All UVA non-student users (e.g., faculty, staff, contractors) and student employees must complete information security awareness training annually.  Information security awareness training is now moved into the Workday Learning system and is new and improved. You can take the Information Security Awareness Training (ISAT) in Workday at any time before your hire month, if you wish. For further details, please visit our ISAT in Workday page
If you are unable to login to Workday, or if you have any questions or concerns, please email it-policy@virginia.edu.  NOTE:  If you have or want to have access to the JointVPN (JVPN) or High Security VPN (HSVPN) then you must complete the employee version of the information security awareness training.  Completing the student Information Security Awareness Training (ISAT) will not satisfy the requirement for annual information security awareness training. 

UVA Student - Information Security Awareness Training (ISAT)

All UVA student users (e.g., are not employed by or work for UVA) must complete information security awareness training as part of their onboarding to UVA.  The information security awareness training used to be known as either the Information Technology Security Awareness (ITSA) tutorial or the Responsible Computing Quiz.   If your only role at UVA is as a student, then you should complete information security awareness training by clicking here to go to the quiz.  If you have any questions or concerns, please email it-policy@virginia.edu

Additional Education & Training Options

  • Phishing — How to identify phishing messages in a short, interactive presentation (~ 15-20 minutes)
  • Security Best Practices — How to protect your data and identity while using the Internet, messaging, or social media; includes phishing identification (~ 30-45 minutes)
  • Security While Traveling — How to protect your data and identity while traveling, whether domestic or international; includes phishing identification (~ 30 minutes)
  • Other — If you need other types of security education and training, let us know by selecting the other option in the Request Information Security Training for a Department and providing more details as to what you need.

Make a Request for Education and/or Training Sessions

Report an Information
Security Incident

Please report any level of incident, no matter how small. The Information
Security Office will evaluate the report and provide a full investigation.

Complete Report Form