Alert Type
Legitimate Email
Message Content
| Title: | Action Required: Check your SharePoint site permissions: O365_Test |
| Comment: | IS Information Security Tickets API Account commented on this ticket on Thu 4/21/22 8:58 AM Pacific Daylight Time. Comments: Dear SharePoint Site owner, Our records show that you are an owner of one or more Microsoft SharePoint sites at the University of Oregon with site privacy set to "Public". *** If that "Public" setting was accidental, then the files in the site may be "overshared." That is, the sharing permissions may allow unintended people to view or edit the files. *** When the privacy is set to "Public", the files and folders on your site are accessible to everyone with a Duck ID, including all UO students, faculty, and staff, and many other UO community members. If that is your intention, then no action is required. Note: If the files contain any data that is sensitive, confidential, or subject to regulations such as FERPA (student data) or HIPAA (health-related data), it is critical to limit access to only the intended recipients. ***Action Requested*** * YOUR SHAREPOINT SITES. Please take a moment to review and adjust the privacy settings for your SharePoint site(s) below, as appropriate. ---------- https://uoregon.sharepoint.com/sites/O365_O365_Test649 ---------- * INSTRUCTIONS. Learn how to change the privacy settings in SharePoint: https://service.uoregon.edu/TDClient/2030/Portal/KB/ArticleDet?ID=140408#public-to-private * GET TECH SUPPORT. If you need help, please contact the IT staff who support your unit or the Technology Service Desk: https://service.uoregon.edu/TDClient/2030/Portal/KB/ArticleDet?ID=31879 (If your SharePoint site has multiple owners, then a copy of this message was sent to each of them.) Thank you for helping the UO safeguard our digital environment! Information Security Office University of Oregon https://infosec.uoregon.edu |
| Requestor: | IS Information Security Tickets API Account |
| Responsible: | IS-Security / IS-Security |
Image
This is a legitimate University of Oregon email from the Information Security Office. It is letting you know that you are an owner of the SharePoint site, listed after the colon (:), is set to "public" and may be accessed by anyone at the university.