We provide a variety of cybersecurity awareness training, information, and resources to everyone using IT resources at UVA to help them protected both their, and UVA's, digital resources.  Prime among the various resources is our security awareness training. 

Information Security Awareness Training (ISAT) and High Security Awareness Training (HSAT)

All users should complete information security awareness training each year (annually).  If you are an employee of UVA  (e.g., faculty, staff, contractors, students and student employees), you can take the Information Security Awareness Training (ISAT) [1] at any time if you wish. For further details, please visit our ISAT webpage [2]. 

If you have, or want to have, access to the High Security VPN (HSVPN) [3] then you must complete the High Security Awareness Training (HSAT) [4] each calendar year (annually).  Completing the student Responsible Computing Quiz or the Information Security Awareness Training (ISAT) [1] will not satisfy the requirement for high security information security awareness training [5].   For further details, please visit our HSAT webpage [5]. 

UVA Student - Responsible Computing Quiz (RCQ)

All UVA student users (e.g., are not employed by or work for UVA) must complete information security awareness training as part of their matriculation (onboarding) to UVA.  The information security awareness training is known as the Responsible Computing Quiz.   For further details, please visit our ISAT webpage [2]. 

If you have any questions or concerns, please email us at [email protected] [6]. 

Education & Training Options

We can train your department on security best practices and current topics.  Please go to the ITS Service Catalog to request Information Security Training [7].  The established sessions offered include: 

• Phishing — How to identify phishing messages in a short, interactive presentation (~ 15-20 minutes)

• Monthly webinars [8] — Various speakers and topics related to keeping your and UVA's data and accounts secure.

• Security Best Practices — How to protect your data and identity while using the Internet, messaging, or social media; includes phishing identification (~ 30-45 minutes)

• Security While Traveling — How to protect your data and identity while traveling, whether domestic or international; includes phishing identification (~ 30 minutes)

If you need other types of security education and training, let us know by selecting the Other option on the Security Training [7] item in the ITS Service Catalog [9] and providing more details as to what you need.

Phishing Simulation [10] — This is a custom phishing email for your unit that is non-punitive.  The recipients receive a custom-designed messages that looks similar to areal phishing message. The goal is to promote awareness about the dangers of phishing.  Click here to request a customized phishing simulation [10] that meets your needs/business requirements.  We will work with you to develop the simulation and provide the results.