Re: the importance of security

[Scott Genung <sagenung () ILSTU EDU>]

Below are the initiatives that we presented which received the highest
degree of opposition.

- SMTP authentication
- perimeter STMP filters to block mail trojans
- split DNS

There are a lot of other things that we have done or will complete before
school starts that have not created any major opposition. It all boils down
to what impact it has on the departmental technology units and not the
benefits that these approaches would provide.

At 09:56 AM 8/11/2004, Jere Retzer wrote:
> If you don't mind, what were the proposals your administrator found
> objectionable? Thanks
>
> >>> sagenung () ILSTU EDU 8/11/2004 7:42:06 AM >>>
> All,
>
> I am new to this listserv so I apologize in advance if this topic has
> been
> discussed in the past. I am curious as to how many of you found the
> need to
> educated your senior administrators to the need of strengthening
> network
> defenses in response to the events of last year and what information
> you
> provided to them that helped them truly understand the importance of
> this
> issue.
>
> The reason why I ask these questions is that we are dealing with some
> fairly stiff opposition to a security plan we developed over the last
> several months at the direction of our Associate VP for Technology
> (who
> reports to the Provost). I am trying to find information that help us
> make
> the case  that the world is a changed placed and that we need to
> enhance
> security in our environment. The push back we're getting from the other
> VP
> areas is:
>
> - last year was just a bad year and we don't expect the same things to
> recur
> - all of the problems we encountered were solely the due to student
> population
> - local departments can adequately defending against these and future
> security threats
>
> In response, my VP has instructed me to only implement for now those
> measures that create no impact upon the non-student population. In our
> case
> at least, none of these beliefs are true and there is data to back
> this
> statement up (which I am preparing). I can only assume that others
> have
> encountered the same types of opposition. If so, how did you sell the
> these
> changes? Are there any documents out there that are written in
> language
> that a senior administrator could understand that would make them
> appreciate the scope and gravity of this problem? I greatly appreciate
> any
> responses.
>
>
> Scott Genung
> Manager of Networking Systems
> Telecommunications and Network Support Services
> 124 Julian Hall
> Illinois State University
>
> (309)438-8731   http://www.tnss.ilstu.edu
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion
> Group discussion list can be found at http://www.educause.edu/cg/.
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion
> Group discussion list can be found at http://www.educause.edu/cg/.


Scott Genung
Manager of Networking Systems
Telecommunications and Network Support Services
124 Julian Hall
Illinois State University

(309)438-8731   http://www.tnss.ilstu.edu

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.