1 / 10

Information Security Update

The University of Georgia. Information Security Update. The Mission of Information Security. Ensure that the University is appropriately managing risk to information assets and information services . Fundamental Protection. People Security Awareness & Education Processes

petra
Télécharger la présentation

Information Security Update

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. The University of Georgia Information SecurityUpdate

  2. The Mission of Information Security /100 Ensure that the University is appropriately managing risk to information assets and information services.

  3. Fundamental Protection • People • Security Awareness & Education • Processes • Comprehensive Policy System • Risk Management • Technology • Electronic Measures to Safeguard Information Systems / 10

  4. Fundamental Safeguards • People • Security Awareness modules • 10 Modules required for all employees • No new requirements if completed in 2009 • Training Program • New IT Employees Security Training • Student Awareness at Orientation • What’s Next • Renovation of awareness program for 2011 • Shift from “what to know” to “what to do” / 10

  5. Fundamental Safeguards

  6. Policy and Guidelines • Processes • Data Access Policy • Authorization of access to Sensitive Data • Limits use of data to only intended purposes • Guidelines for Handling Sensitive Info • Outlines responsible behavior for data handlers • Guidelines for Trusted Computing • Prudent measures for systems that store or process Sensitive Information / 10

  7. SSN Removal - Distributed Total Removed 5,049,488

  8. Technology Efforts • Edge Firewall Protections • Protect sensitive systems from Internet attack • Protect workstations from Internet attack • Limits administrative access to systems • Security Technology Pilots • Updated Virtual Private Network Technology • Web-based Malware Filtering • Endpoint Security Suite • Technology / 10

  9. Endpoint Security Pilots Initial Evaluation Data for Endpoint Security Products • Technology

  10. Take-away / 10 Policy & Guidelines http://www.infosec.uga.edu/policies/index.php SSN removal resources https://infosec.uga.edu/sate/canthessn.php Technology Pilots https://infosec.uga.edu/TBD

More Related