Community colleges aren't quite as high on the list of hackers and scammers as institutions like banks, hospitals and four-year research universities, yet the institutional and personal data stored on their servers and in the online cloud can be valuable, so they need to lock down their data like any other entity. This requires a combination of technological defenses like firewalls and encryption, along with training for faculty, staff and students so they recognize phishing and social engineering attempts to hack into their systems. Community colleges need to take cyber security as seriously as they take physical security issues. There are policies and student training in the event of an active shooter on campus in place, but what about data security? While firewalls and other technological advances have improved very quickly, the author maintains that a robust cyber security training program is key to minimizing the chances of human errors that can cause security breaches. Such breaches can carry both financial and reputational losses for the colleges. Phising is by far the most popular and effective threat vector, and the author believes that part of a good training program should be adopting a pro active approach to include regular simulated phishing exercises for staff and students. Having posters up and spots in campus news papers are some other ways to constantly remind students and staff to be aware, and employ safe data practices.