Reminder Sign Up for SSRP for your FIT User Account

Attackers frequently target help desks to gain unauthorized access to user accounts. This is achieved through social engineering tactics, where scammers impersonate legitimate users and request password resets.
Scammers will fabricate scenarios that require immediate password resets. They often use urgency or authority to pressure help desk personnel into bypassing standard verification procedures. Scammers have even been known to use AI to replicate someone’s voice. These tactics are sophisticated; help desk staff may inadvertently reset passwords without proper verification, granting attackers access to sensitive accounts and data.
How to help avoid this scam:
Self-Service Password Reset (SSPR) system significantly reduces the risk of these attacks. SSPR empowers users to reset their passwords independently, eliminating the need for direct help desk intervention.
Benefits of SSPR:
Automated Identity Verification: SSPR systems utilize pre-configured secrets to verify user identities, reducing the likelihood of successful impersonation.
Reduced Human Error: Automating password resets minimizes the potential for human error and social engineering vulnerabilities within help desk operations.
Improved Efficiency: SSPR reduces the number of help desk tickets related to password resets, freeing up resources for other critical tasks.
Audit Trails: SSPR systems typically log all password reset attempts, providing a clear audit trail that can be used to investigate suspicious activity.
Register to use Self-Service Password Reset (SSPR) at FIT:
At FIT, we are making a change that will require all users to enroll in SSPR by March 31, 2025. We have reached out to individuals who are not already enrolled, informing them of this change with detailed instructions on how to enroll. To register, you must have a current, non-expired FIT password. If you have forgotten your password or your password has expired, please contact TechHelp for support. After this one-time SSRP set up you will be able to self-manage your account and password changes in the future.
Don’t wait until you’re locked out. Take a few minutes to sign up for SSPR today. It’s a simple step that can save you time and frustration and significantly enhance your account security.
Rakesh Kumar
AVP of IT Infrastructure Services and Chief Information Security Officer
Information Technology
Fashion Institute of Technology
333 Seventh Ave, 13th floor
New York, NY 10001
(212) 217-3403
About Cybersafe
The Division of Information Technology is dedicated to protecting the FIT community from the latest cybersecurity threats by providing warnings and creating awareness through training and information-sharing. Visit fitnyc.edu/cybersafe for more information. And stay tuned for emails from [email protected] for the latest from the Cybersafe campaign at FIT.
