Another tip in a series provided by the Offices of Information Security, Information Systems & Computing and Audit, Compliance & Privacy

The COVID-19 pandemic moved classroom education to online learning in 2020, which led to a surge in virtual and hybrid learning. The increased use of virtual learning platforms has led to hackers’ attempts to access Learning Management Systems (LMS), which may contain students’ grades, classroom rosters, intellectual property, and other personal information. The following steps aid in securing the LMS you use for teaching and learning.

1. Back up your data in multiple secure locations - Use a cloud-based secure location for data backup and a password-protected portable hard drive as a second location. 
2. Use a password management application like LastPass for strong passwords. LastPass creates a strong password for your online account and automatically fills in the password when using a web browser to access your LMS.
3. Enable two-step verification to access your Penn Learning Management System like Canvas or to access other LMS like Google Classroom, Moodle, Adobe, or Blackboard.
4. Patch and update your LMS when prompted to do so. Run monthly updates for your browser plugins and extensions, e.g., Zoom or Adobe.  
5. Beware of phishing. Learn how to recognize phishing email messages to avoid allowing unauthorized access to your sensitive data.  
6. Avoid granting direct access to files posted to your LMS with co-workers or students to prevent undesired access to your sensitive information. 
7. Refrain from treating your LMS as data storage. Post only course-related material to your LMS. 

Canvas at Penn is a cloud based LMS supported by the University to create and manage online courses. For more information, visit: https://infocanvas.upenn.edu. 

The Penn Online Learning Initiative provides faculty, staff and students with online courses and programs. Some courses are offered for free; to learn more, visit: https://www.onlinelearning.upenn.edu.