Educause Security Discussion mailing list archives

Re: Faculty Grant Machines


From: Cal Frye <cjf () CALFRYE COM>
Date: Thu, 7 Aug 2008 10:55:19 -0400

Zach Jansen wrote:
I'm wondering how other schools handle computers purchased by faculty
using grant money. Do you require that those machines be managed by
your security software such as AV, patch management, etc? Do you
segregate those from the rest of the network and leave them alone? Or
do you let faculty do whatever they wish to do with the machines?
Does anyone know what the institutions responsibility is in the event
of a breach of confidential information on grant purchased research
machines? Any sage advice or information is appreciated.

Most of the normal cases have already been discussed, but we do have
some systems that are part of instruments where the instrument vendor
claims they cannot be patched or altered. Those we either keep entirely
off the network or severely restrict network access through firewall
rules, granting them access to printing only, for example. We've gotten
little feedback, especially as we can cite past examples of bad
behaviour ;-)

--
Regards,
-- Cal Frye, Network Administrator, Oberlin College

   www.calfrye.com,  www.pitalabs.com


"Seen it all, done it all, can't remember most of it."

Current thread: