The University of Waterloo’s Information Systems & Technology’s Information Security Services (IST/ISS) provides a cybersecurity awareness training program to strengthen the University’s security posture. This training ensures that all individuals accessing University information systems are equipped with the necessary knowledge to recognize and mitigate security threats.
Who needs to complete the training?
All employees (Staff & Faculty) of the University of Waterloo community who access university information systems and data. This includes graduate students, visiting scholars, research fellows, co-op students, and any other casual or temporary employee or contractor who has access to information in the custody of the University of Waterloo.
Note: All individuals listed will be called "participants" on this webpage.
Training frequency
- Initial Training: Completed during onboarding.
- Annual Refresher Training: Required for continued compliance.
- Targeted Training: May be assigned after security incidents or system updates.
Course offerings
Course: Cyber Awareness Essentials
Developed by: SANS Institute
Length: 30 minutes
Audience: Everyone
Topic: Introduction to Cyber Security
Description: This introductory course delves into the topic of cyberattacks that exploit human vulnerabilities to bypass technological defenses and gain access to sensitive data and information. However, with the right knowledge and awareness, individuals can identify and report signs of potential attack. Through this course, learners will be encouraged to develop a strong cyber shield and improve their cyber-detection skills, both while working on campus, at home or in their everyday lives.
Course: Cyber Awareness for Knowledge Workers
Developed by: SANS Institute
Length: 20 minutes
Audience: Knowledge Workers
Topic: Privacy and Data Security
Description: This course, specifically designed for knowledge workers, offers a comprehensive overview of the importance of safe data-handling practices and privacy principles throughout the data lifecycle. Learners will gain a deeper understanding of the critical role security controls such as encryption play in protecting sensitive information from advance targeted attacks. By completing this course, knowledge workers will be better equipped to navigate the complex landscape of data security and privacy.
Course: Safeguarding your research
Developed by: Government of Canada
Length: 45 minutes
Audience: Researchers
Topic: Introduction to Research Security
Description: This introductory research security course emphasizes on the need to balance research openness with necessary protection, considering the potential uses of the research and the lengths to which others may go to acquire it. The course provides a deeper understanding of why research security matters and empowers learners to recognize potential risks and develop effective mitigation tools and strategies in collaboration with institutional or expert support. This course provides a valuable foundation for anyone involved in research and emphasizes the importance of a proactive and strategic approach to research security.
Course: Cyber Security for Researchers
Developed by: Innovation, Science and Economic Development (ISED) Canada and SANS Institute
Length: 45 minutes
Audience: Researchers
Topic: Introduction to Research Cyber Security & International Travel
Description: This introductory research cyber security course offers a comprehensive overview of the current cyber threat landscape, providing valuable insights and practical advice on how to maintain good cyber hygiene practices while working or traveling internationally. By completing this course, participants will be equipped with the knowledge and tools necessary to recognize and implement the systems and practices required to ensure the safe handling, storage, and transmission of sensitive research data. Learners will gain a deeper understanding of the importance of cyber security in the research field and how to best protect themselves and their valuable data.
Additional training & Accessibility
You may also be interested in:
- Information Security Awareness for Finance and Commerce
- Optional topics in Information Security Awareness
- In-person or virtual live sessions may be arranged upon request.
All training is designed to meet accessibility standards, including transcripts for all videos and alternative formats for quizzes (available upon request).
How to access the course offerings
Training is delivered online through Waterloo’s Learning Management System LEARN, which requires participants to log in using their WatIAM credentials.
To register
- Visit LEARN to self-register for these courses.
- Select the self-registration option.
- Scroll to select the desired course and follow the registration.
Tracking and reporting
- Training completion is recorded in LEARN and integrated with Workday for tracking.
- Leadership can monitor compliance through Workday reports.
Training help
- Please contact Information Security Services for questions or concerns about ISS-offered training.
- See IST Knowledge Base for more help with LEARN.
Additional resources
Cyber Awareness training
- Cyber Awareness website
- Security policies, standards, and guidelines
- IST (Information Systems & Technology) Service Catalogue: Security
Research Security training
The Information Security Services Team in IST is available to assist researchers with developing cybersecurity plans. To start the process, PIs should complete IST’s Information Risk Assessment Intake Form for Research Initiatives. Questions may be directed to ist-researchsecurity@uwaterloo.ca.
Report a cyber event
To report a suspected cyber event, contact the SOC (Security Operations Center) as soon as possible after discovery by sending an email to soc@uwaterloo.ca or by calling +1-519-888-4567 ext. 41125.