Information Security is a team sport

We cannot protect all of UAB without your help. You play a key role in protecting information. Be knowledgeable. Be aware. Be proactive. Help us enable UAB to be world class.

The vision of UAB IT’s information security office is to “Secure to Empower.” Information Security is responsible for mitigating risk for the University through the development and maintenance of UAB’s Information Security strategy, which includes IT policies and best practices, security training and awareness programs, security monitoring and operations, secure architecture and vulnerability management. Our goal is to balance confidentiality (keeping private matters private), integrity (assuring that your information is complete and accurate) and availability (having timely and reliable access to your information).


2-Factor Authentication is required for all UAB students, faculty and employees.

Security Awareness

Be knowledgeable about common threats, like phishing, and how to protect yourself and UAB.

Tools & Services

Tools and services we deploy to help safeguard the University’s computing resources and data.

Data Classification

A classification system that makes it easier for faculty, staff and researchers to determine how to best secure the information.

Policies & Guidance

Policies help keep everyone safe from malware, data thieves, and identity theft.


UAB stays compliant with federal laws that stipulate how data related to HIPAA, FISMA, PCI, GLBA, and FERPA must be protected.

Latest from Security

  • The Pause Button: Why It's Important to Think Before You Post

    We’ve all heard the saying “think before you speak,” but what about “think before you post?” Social media is a great way to keep in contact with friends, relatives, and coworkers. However, the internet is a public place and there[…]

  • The Dos and Dont's of Social Media Safety

    Most people have a social media account — or several. Staying safe on social media is about more than just securing your password. Here are some tips: Make accounts private and adjust the limits on what people can see when[…]

  • Duo SMS message expiration times changing

    To help better secure UAB accounts, UAB IT is reducing the amount of time an SMS message sent by Duo two-factor authentication will last after it is sent to a user for authentication. Over the next several weeks, the expiration[…]

  • UAB IT Investigates new wave of phishing emails

    UAB IT is investigating a new rash of phishing emails sent to campus mailboxes, many of them urging action on expired passwords or purporting to be notifications of passwords or authentication. The emails may include a malicious link to take[…]