Re: Enterprise Wide Security Plan

["Crawford, Charles D" <ccrawf () KU EDU>]

My University is going through the same process.  What I have found to be
very informative is to research the member listing and just shoot an e-mail
to specific people and look at their individual web sites.  Everyone I have
worked with has been very helpful.

As far as dealing with SPAM, I believe User Awareness is a key way to
approach that.  Filter's are very hard to setup for a University type
atmosphere (at least here it is).  You could create a policy or add to an
e-mail policy any reference to SPAM originating from campus and the
consequences from doing so.

Proper IDS placement can be accomplished after an Assessment and you
determine your critical assets.  I found www.security.vt.edu as a great
reference for doing Assessments.


Hope this helps a little,

Charles Crawford
University of Kansas
IT Security Officer
785-864-0491
ccrawf () ku edu


-----Original Message-----
From: Derek Hilley [mailto:dhilley () ACCD EDU]
Sent: Thursday, October 31, 2002 4:08 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Enterprise Wide Security Plan


Hello All,

I am relatively new to the discussion list, but after reading Bruce
Purcell's email it sounds like everyone responds well.

The Community College I work at will be implementing an Enterprise Wide
Security Solution in the following months.

The questions we have are as follows:

1)  Can you suggest policies and plans from institutions that have
implemented Enterprise Wide Security?  I have research a few that I have
seen previously on the listserv.

2)  Main areas of concerns are:
        -Antivirus
        -AntiSpam(30% of our traffic)
        -Intrusion Detection
        -Bandwidth Management.
Any suggestions of a solution, product(s), and/or helpful research?

Thank you for your help in advance!

All the Best,

Derek Hilley
Project Manager - Information Technologies
Alamo Community College District
(O) (210)220-1671
(F) (210)220-1671

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/memdir/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.