Re: Faculty Grant Machines

["Kieper, David" <kieperd () UWGB EDU>]

First we remind them that grant money is the same as institutional money.  They do not own the computer equipment in 
any way, shape, or form.  We let them know the expected life for the computer (3 to 4 years) and that after that, if 
they do not have funds to support a replacement, the asset will have to be retired.  They are also informed that when 
the computer is retired, it has to be processed back through our office to be disposed of properly according to state 
property rules. Any equipment bought improperly by individuals will not be reimbursed or supported by the University.

We have standard system configurations (PC/Mac, desktop/laptop) that we stock and all computers must be purchased 
through our department.  All that are to remain attached to the campus network will have our standard configuration and 
software load (OS, patch management, AV, etc.).

For those computers that will spend most time off campus, we will still set them up with A/V and auto-update for as 
many products as we can.  We encourage these persons to bring them back to our office once a year for a "check up" 
which enables us to update other applications that they may do on their own.


Regards,

David Kieper
Manager, Network and Infrastructure Services
Information Technology Security Officer
Information Services Division
University of Wisconsin - Green Bay             office: (920) 465-2238
2420 Nicolet Drive                                      fax:    (920) 465-2864
Green Bay, WI  54311-7001   USA                 email:  kieperd () uwgb edu





-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Zach 
Jansen
Sent: Wednesday, August 06, 2008 1:07 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Faculty Grant Machines

I'm wondering how other schools handle computers purchased by faculty using grant money. Do you require that those 
machines be managed by your security software such as AV, patch management, etc? Do you segregate those from the rest 
of the network and leave them alone? Or do you let faculty do whatever they wish to do with the machines? Does anyone 
know what the institutions responsibility is in the event of a breach of confidential information on grant purchased 
research machines? Any sage advice or information is appreciated.

Thanks,

Zach




--

Zach Jansen
Information Security Officer
Calvin College
Phone: 616.526.6776
Fax: 616.526.8550