SMPH Cybersecurity

All cybersecurity-related support must now be requested through the Cybersecurity Portal. The Cybersecurity Portal, part of SMPH Navigator, streamlines how cybersecurity requests are submitted, tracked, and resolved. It improves response times, enhances communication, and provides better visibility into the status of your requests.

Please Note:
You will receive email notifications when your request is updated.
To view or respond to updates, you must log into the SMPH Navigator portal.

You can submit and track requests for:

Access SMPH and UW-Madison cybersecurity policies, standards, and resources to protect sensitive information and ensure compliance.

Cybersecurity & HIPAA Security Training and Awareness

• All UW faculty and staff are required to complete annual Information Security Awareness Training. Complete your training at go.wisc.edu/security-training
• All UW faculty, staff, students, and volunteers who work in areas that have access to Protected Health Information, or support areas that have access to this information, are required to complete annual HIPAA training. Complete your training at go.wisc.edu/hipaatraining

Policies, Standards & Guidance Documents

• SMPH Cybersecurity is committed to protecting the privacy and security of our patients, research participants, faculty, staff, and students. Please reach out if you have any questions on adhering to the HIPAA Security Rule or being in compliance with policies and standards to ensure good stewardship of data. For questions, visit the SMPH Cybersecurity Portal: https://smph-navigator.atlassian.net/servicedesk/customer/portal/2
• Universities of Wisconsin, UW-Madison, and SMPH Policies, Standards, and Guidance Documents: https://kb.wisc.edu/smph/internal/142446

Report an Incident

• It is important to report any cybersecurity incident, no matter how large or small it may seem, to ensure DoIT and SMPH Cybersecurity can take action to protect you and your data.
• SMPH Cybersecurity Portal: https://smph-navigator.atlassian.net/servicedesk/customer/portal/2
• Call the DoIT Help Desk: 608-264-4356 (for off hours select option 0)
• Report a HIPAA Incident: go.wisc.edu/hipaareport

Cybersecurity Best Practices

• Be cautious with emails: Avoid clicking on suspicious links or attachments. Look for signs like typos, odd URLs, and a sense of urgency to identify phishing: https://it.wisc.edu/learn/learn-how-to-recognize-and-report-phishing/
• Use SMPH VPN: Use the SMPH Virtual Private Network (VPN) to ensure secure remote access
• Use a strong passphrase: create a unique, complex passphrase and change it if you think your account or passphrase has been compromised
• Use UW Madison’s password manager: create random passphrases and store passphrases securely: https://it.wisc.edu/services/1password/
• Use multi-factor authentication: Add an extra layer of security to your accounts by enabling an additional verification method: https://it.wisc.edu/services/duo-multi-factor-authentication-mfa/
• Lock devices: Lock your devices when not in use or you step away

Cybersecurity Resources

• SMPH Cybersecurity KnowledgeBase: https://kb.wisc.edu/smph/internal/search.php?cat=13913
• SMPH Endpoint Standards: https://kb.wisc.edu/smph/internal/smph-endpoint-device-standards
• UW-Madison and SMPH Storage Options: https://kb.wisc.edu/smph/internal/144445
• Cybersecurity for International Remote Work: https://kb.wisc.edu/smph/internal/141655
• SMPH Cybersecurity’s Guide on Navigating Generative AI: https://kb.wisc.edu/smph/internal/148147
• Guidance on Cybersecurity Risk Assessment Process for Researchers: https://kb.wisc.edu/smph/internal/137178
• SMPH Cybersecurity Incident Response Plan: https://kb.wisc.edu/smph/internal/142370

Why We Exist

To safeguard educational excellence and research innovation by protecting SMPH’s people, data, systems, and technology through risk-informed cybersecurity and a culture of shared responsibility.

Our Community. Our Data. Our Responsibility.

Where We’re Going

To empower the SMPH community to embed security into the fabric of our technology, research, and daily operations to protect the SMPH mission and maintain the trust of those we serve.

Better Together: Protecting People, Powering Progress.

Values

1. Leadership, Accountability & Trust
   We lead by example—making informed, principled decisions and owning outcomes. By communicating openly and operating transparently, we strive to build trust across SMPH and ensure that cybersecurity is both visible and credible.
2. Partnership & Collaboration
   We succeed through strong partnerships. By working closely with researchers, educators, administrators, and technology teams, we integrate security into the processes and solutions that support SMPH’s mission.
3. Security as an Enabler
   We design security to be a catalyst—not a barrier—for innovation. We empower teams to achieve their goals securely by delivering practical guidance, effective controls, and responsive support.
4. Inclusion & Community Building
   We foster a welcoming and inclusive environment where diverse perspectives strengthen our approach to security. We invest in growing a community of cybersecurity-aware professionals across SMPH.
5. Continuous Improvement & Excellence
   We never stop learning. We adapt to new threats, improve based on experience, and strive for operational excellence in every facet of our cybersecurity mission. 

Before We Act, We Ask:

• Strategy: Does this help us be proactive?
• Risk: Does this significantly reduce risk?
• Partnership: Does it build trust and strengthen collaboration?
• Sustainability: Can we make this repeatable, scalable, and enduring?
• Measurement: How will we know it worked?
• Alignment: Does this directly advance our mission, vision, and values?
• Ease of Use: Does this reduce friction and make cybersecurity seamless in daily work?
• Culture: Will this elevate cybersecurity awareness and drive everyday adoption?