Educause Security Discussion mailing list archives

Re: policy question?


From: Brad Judy <win-hied () BRADJUDY COM>
Date: Thu, 28 Oct 2010 15:51:01 -0400

Be careful with such a policy.  Between research funding and personal
funding, a lot of faculty equipment might not technically belong to the
university.  Just ask a typical research lab what items would move with them
if the PI decided to move to another university.  

 

Certain types of schools might be able to provide for all faculty needs with
institutionally-owned computers and equipment, but many would have major
problems without "personally owned" items in use.  Not to mention the vast
amount of university business that is done on personally owned cell phones
and smart phones.  

 

Plus, there's the issue of third-party owned equipment on the university
network, but that issue has an option of contractual security requirements.


 

Brad Judy

 

Emory University

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Anand S Malwade
Sent: Thursday, October 28, 2010 3:30 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] policy question?

 

I was wondering if other institutions have a general Policy that

 

a)       explicitly prohibits Employees and administrators from using
personal laptops or computing equipment for conducting university business ?
The Assumption is that they are provided university owned equipment with
standard images with up to-date security updates and protection. 

b)      Prohibits Student Workers/GA's from handling confidential
information when working with certain departments.

 

 

Thanks,

Anand

 

 

 

Anand Malwade

IT Security

Seton Hall University

 

  


Current thread: