Re: policy question?

[Valdis Kletnieks <Valdis.Kletnieks () VT EDU>]

On Fri, 29 Oct 2010 09:34:55 MDT, "SCHALIP, MICHAEL" said:
> Do you enforce the "you must be this tall..." strictly through policy, or
> through technology?....NAC?  Something else?

Mostly policy, with the occasional reminder that failures are your own problem
(see below). We also distribute a free 'VTNet' CD (components also available
online), which will automatically install A/V software and do most of the
security hardening needed, so there's really no excuse for having a too-short
system.

http://www.vtnet.vt.edu/

A number of years ago, we had a relatively high-profile hack on campus. The
upshot was that a professor ended up with one of his machines missing a hard
drive, which was in an evidence bag (this was back when a hard drive was still
a good chunk of change).  Prof asks department chair for department funds for a
new hard drive, department chair says "No, you didn't secure the system, so the
money's coming out of *your* budget, not mine".

Randy was *very* busy with giving security classes to departments once that
story started going around the rumor mill... :)

Attachment: _bin
Description: