FSA Cybersecurity Announcements and Guidance

Electronic Announcements

Below are links for current Cybersecurity Compliance Electronic Announcements:

Service Provider Relationships for GLBA Compliance (EA ID: GENERAL-24-46)
Alert: Educational Institutions at Risk Due to Improper Authorization Vulnerability in Confluence Data Center and Server (EA ID: GENERAL-23-111)
Free Cybersecurity Resources for Small Schools (EA ID: GENERAL-23-103)
Alert: Research Institutions Targeted by Atlassian Confluence Data Center and Server Vulnerability (EA ID: GENERAL-23-90)
Opportunity to Comment on NIST SP 800-171, Rev. 3 (EA ID: GENERAL-23-53)
ALERT: Critical Vulnerability in MOVEit Transfer Software (EA ID: GENERAL-23-49)
FBI/CISA RELEASE JOINT ADVISORY on Active Exploitation of a PaperCut Vulnerability Against Educational Facilities (EA ID: GENERAL-23-35)
New Cybersecurity Resources for Institutes of Higher Education Available (EA ID: GENERAL-23-10)
Updates to the Gramm-Leach-Bliley Act Cybersecurity Requirements (EA ID: GENERAL-23-09)
FBI ALERT about Login Credentials from US Education Institutions Found Compromised on Dark Web (EA ID: GENERAL-22-38)
New Ransomware and School Closure Resources Available (EA ID: GENERAL-22-34)
New Quarterly Cybersecurity Newsletter from Federal Student Aid (EA ID: GENERAL-22-33)
Joint Cybersecurity Advisory - 2021 Trends Show Increased Globalized Threat of Ransomware (EA ID: GENERAL-22-11)
StopRansomware.gov website – The U.S. Government’s One-Stop Location to Stop Ransomware (EA ID: GENERAL-22-02)
Guidance About Use of Protected Brands and Official Government Names, Logos, or Insignia (EA ID: GENERAL-21-84)
Reminder - Identity Verification (EA ID: GENERAL-21-54)
TECHNOLOGY SECURITY ALERT: IRS Warns Postsecondary Institution Students and Staff of Impersonation Email Scam (EA ID: GENERAL-21-22)
Protecting Student Information – Compliance with CUI and GLBA
TECHNOLOGY SECURITY ALERT – Active Ransomware Campaign Targeting Education Institutions
Enforcement of Cybersecurity Requirements under the Gramm-Leach-Bliley Act
TECHNOLOGY SECURITY ALERT – Exploitation of Ellucian Banner System Vulnerability – Update #1
TECHNOLOGY SECURITY ALERT – Exploitation of Ellucian Banner System Vulnerability
Active Phishing Campaign Targeting Student Email Accounts

Dear Colleague Letters

Below are links for current Cybersecurity Compliance Dear Colleague Letters:

Publications and References

Below are additional publications and references:

Documentation

Below are FSA references and guidelines for Cybersecurity Compliance: