100 likes | 236 Views
The University of Georgia. Information Security Update. The Mission of Information Security. Ensure that the University is appropriately managing risk to information assets and information services . Fundamental Protection. People Security Awareness & Education Processes
E N D
The University of Georgia Information SecurityUpdate
The Mission of Information Security /100 Ensure that the University is appropriately managing risk to information assets and information services.
Fundamental Protection • People • Security Awareness & Education • Processes • Comprehensive Policy System • Risk Management • Technology • Electronic Measures to Safeguard Information Systems / 10
Fundamental Safeguards • People • Security Awareness modules • 10 Modules required for all employees • No new requirements if completed in 2009 • Training Program • New IT Employees Security Training • Student Awareness at Orientation • What’s Next • Renovation of awareness program for 2011 • Shift from “what to know” to “what to do” / 10
Policy and Guidelines • Processes • Data Access Policy • Authorization of access to Sensitive Data • Limits use of data to only intended purposes • Guidelines for Handling Sensitive Info • Outlines responsible behavior for data handlers • Guidelines for Trusted Computing • Prudent measures for systems that store or process Sensitive Information / 10
SSN Removal - Distributed Total Removed 5,049,488
Technology Efforts • Edge Firewall Protections • Protect sensitive systems from Internet attack • Protect workstations from Internet attack • Limits administrative access to systems • Security Technology Pilots • Updated Virtual Private Network Technology • Web-based Malware Filtering • Endpoint Security Suite • Technology / 10
Endpoint Security Pilots Initial Evaluation Data for Endpoint Security Products • Technology
Take-away / 10 Policy & Guidelines http://www.infosec.uga.edu/policies/index.php SSN removal resources https://infosec.uga.edu/sate/canthessn.php Technology Pilots https://infosec.uga.edu/TBD