As libraries continue to transform into data warehouses of patron information, the risk of being hacked has never been so prevalent. Three panelists in the IT profession will present an overview of current cyber threats facing libraries and the challenges of sharing data in a digital age. IT professionals representing federal, public and county library systems will share their suggestions for safeguarding your library infrastructure. Are you an administrator? A library IT professional? Or someone who works closely with user data? If so, this program will leave you with key takeaways to improve your library’s cybersecurity.

1. Don't click that link!
Hosted by Core: Leadership, Infrastructure, Futures

2. About Rob
Rob Nunez is the Division Head of Support Services
at the Kenosha Public Library, where he oversees
the operations of IT and materials acquisition,
including cyber security, contract negotiation, and
workflow automation. Rob was also a member of the
ALA Bill of Rights Article VII working group, and
advocates for how libraries change lives. When not
at the desk, Rob is a technology enthusiast and
house handyman.

3. About Kenosha
● Halfway between Milwaukee and Chicago
● ~100K residents
● 4th largest City in WI
The Library
● 4 Buildings
● 3 Outreach Vehicles
● ~90 Staff
● 2.5-ish IT Staff

4. Overview
1. History of Tech @ KPL
2. Staff Training & Tools
3. How it saved us
4. Patron Training

5. Tech History @ KPL
● Little contract negotiation
● No standards
● Little documentation & training
● Staff not understanding “why”

6. Data Privacy Training
https://dataprivacyproject.org
4 Training Session Topics:
● Introduction to Data Privacy
● Risk Assessment & Passwords
● VPN and TOR and Malware (Oh
My!)
● Browsing and Privately

7. Cyber Security Training
https://www.cyberreadinessinstitute.org/

8. Staff Training
- KnowBe4 (2019 to 2020)
- InfoSec IQ (2020 Forward)
Training Schedule
- Bi-weekly Tests
- Monthly Videos
- Varying Difficulty

9. Staff Training
Phone Phishing
USB Attack

10. Staff Training Results
- Phishing prone 18% drop
- Included in onboarding
- Finding a way to balance
Tools Needed
- All Management has 2FA (OTP &
YubiKey)
- Internal Laptop Borrowing Program
- Single sign-on when possible

11. It Paid Off
- Checked the link
- Alerted IT right away

12. Pretty Obvious

13. Patron Training
● Updated existing programs
○ Every tech class has data privacy & security elements
○ Classes for just these topics
○ One-on-one tech appointment (Pre & Post COVID-19)
● Deployed Secure Print & WiFi access
○ ePrintIT & MyPC from TBS
○ WPA2 with RADIUS Auth
● Marketing Campaign about Security & Privacy

14. Questions?