Getting Help and Resources

Last updated on 2026-08-27 | Edit this page

Estimated time: 20 minutes

Overview

Questions

  • Who do you contact for security questions?
  • What documentation is available?
  • How do you get security training updates?
  • What if you have questions about this training?

Objectives

  • Know who to contact for different types of help
  • Find security documentation and resources
  • Understand ongoing training and support
  • Know how to get clarification on policies

Support Contacts


HPC Security Issues

Email:

Response time: Within 24 hours (hours during business days)

What to contact for:

  • Security incidents or breaches
  • Policy questions or violations
  • Account access problems
  • Data handling advice
  • Incident reporting

ITS Help Desk

Phone: Check Pomona directory

Website: See ITS portal on Pomona website

Response time: Varies by ticket type

What to contact for:

  • Authentication/login problems
  • DUO setup or troubleshooting
  • Password reset
  • General IT issues
  • Malware/security concerns on personal device

Your PI or Advisor

Direct: Contact them directly

What to discuss:

  • Data classification decisions
  • Whether work is appropriate use
  • Publication policies
  • Data retention decisions
  • Collaboration with external partners

Compliance Office

Via: Your department

What to discuss:

  • Export control questions
  • FERPA data handling
  • Patent and IP questions
  • Confidentiality agreements

Documentation and Resources


Pomona Resources

  • HPC Documentation: www.pomona.edu/its

  • Security Policies: See ITS website

  • Data Classification Guide: Request from

  • Acceptable Use Policy: Full text available from ITS

Sagehen HPC Specific

Industry Standards

Getting Clarification on This Training


If Something Isn’t Clear

  1. Re-read the relevant episode
  2. Review the learner reference guide
  3. Email with specific question
  4. Ask in person at office hours or by appointment

Questions You Can Ask

  • “What data classification should I use?”
  • “Is this activity allowed under the policy?”
  • “How do I report a security concern?”
  • “Do I need to encrypt my data?”
  • “Is this appropriate use?”
  • Any other security or policy question

No Question is Dumb

Honest questions show good security practice. Pretending to understand when you don’t is the actual problem.

Callout

Default to Asking

If you’re 90% sure about a security decision and 10% uncertain, ask . A one-minute email can prevent weeks of account suspension or worse. Security professionals would rather answer 100 obvious questions than have one serious incident slip through.

Ongoing Training and Updates


Annual Reminders

Pomona sends annual security awareness reminders:

  • Check email for messages from ITS
  • Review Acceptable Use Policy annually
  • Participate in security awareness campaigns
  • Attend optional advanced training

When Policies Change

If Pomona updates security policies:

  • You’ll receive notification
  • Key changes will be highlighted
  • Training updates will be provided
  • Questions are encouraged

Advanced Training

After completing this mandatory training:

  • Workshop 15: gocryptfs Encryption (highly recommended for sensitive data)
  • Advanced security topics: Check HPC training schedule
  • Data protection training: Additional resources available

Summary: Key Takeaways


Before you finish this training, remember:

Your Responsibilities

  1. Use HPC for approved research/education only
  2. Protect your password and authentication
  3. Classify your data appropriately
  4. Report security incidents promptly
  5. Follow all policies
  6. Ask when unsure

Key Contacts

  • : HPC security and policy
  • ITS Help Desk: Account and login issues
  • Your PI: Research and data questions
  • Compliance office: Legal/regulatory questions

Most Important

  • Asking for help is always appropriate
  • Reporting incidents early protects everyone
  • Security is a shared responsibility
  • Mistakes happen; honesty is essential
  • You’re not alone in this journey

Policy Acknowledgment Form


By completing this training, you acknowledge:

  • ✓ I have read and understood the Acceptable Use Policy
  • ✓ I understand the data classification system
  • ✓ I know how to authenticate securely
  • ✓ I understand my responsibilities
  • ✓ I know how to report incidents
  • ✓ I understand consequences of violations

By logging in to Sagehen, you acknowledge all of the above.

Questions Before You Finish?


Before you complete this training:

  • Do you understand all 7 episodes? (One more follows this one: social engineering and phishing.)
  • Are there concepts that are unclear?
  • Do you know who to contact for help?
  • Do you have specific questions about your research?

If you answered “no” to any question, email before finishing.

Congratulations!


You have completed the HPC Security Orientation.

Next steps:

  1. Acknowledge the Acceptable Use Policy (separate form)
  2. Set up DUO Multi-Factor Authentication if not done
  3. Start accessing Sagehen securely
  4. Consider Workshop 15 (gocryptfs) if handling sensitive data
  5. Refer back to resources anytime you have questions

Thank you for taking HPC security seriously. Your diligence helps protect our community.

Challenge

Challenge: Create Your Security Action Plan

Based on what you’ve learned, create a personal security action plan:

  1. My account security: How will I protect my password and DUO?
  2. My data: What classification applies to my research? Where will I store it?
  3. My responsibilities: What policies apply to my work?
  4. My resources: Who will I contact if I have questions or incidents?

Write 2-3 sentences for each.

Example answers:

  1. Account security: “I will use a password manager to create and store a strong unique password. I will keep my DUO app updated and approved logins I didn’t trigger.”
  2. Data: “My data is unpublished research, so it’s PROPRIETARY classification. I will store it in /bigdata with my group. If I work with student ID numbers, I will encrypt with gocryptfs (RESTRICTED).”
  3. Responsibilities: “I will only use Sagehen for my approved research work. I won’t share my account. I will follow the Acceptable Use Policy.”
  4. Resources: “My PI for research questions, for security questions, and ITS Help Desk for account issues.”
Key Points
  • Contact for all HPC security questions
  • ITS Help Desk handles account and authentication issues
  • Documentation and resources are available on HPC wiki
  • Asking questions is encouraged and appropriate
  • This training sets foundation; advanced training available later
  • You’re expected to implement these practices immediately
  • Security is everyone’s responsibility working together