Educause Security Discussion mailing list archives

Re: DLP Survey

From: Mardecia Bell <mardecia_bell () NCSU EDU>
Date: Wed, 9 Nov 2016 08:42:55 -0500

We have just started using CloudLock here at NC State University.

Mardecia

On Tue, Nov 8, 2016 at 4:39 PM, Miguel Hernandez <
miguel.hernandez () domail maricopa edu> wrote:

We've been using Cloudlock.  The functionality focuses more on checking
what is stored in Google Drive and also how that information is shared.

[image: eSig Logo]
Miguel Hernandez IV, Ph.D. CISSP, CISA
Associate Vice Chancellor ITS
Chief Information Security Officer
2411 West 14th Street, Tempe AZ 85281
email | miguel.hernandez () domail maricopa edu
website | https://www.maricopa.edu
*Follow me on Twitter <https://twitter.com/mh4phd>.*
*Follow Information Security on Google+
<https://plus.google.com/u/0/communities/105674668394659897242>.*

This message contains information which may be confidential and/or
privileged. If you are not the intended recipient of this message, please
notify the sender, delete and do not use or disseminate this information.

On Tue, Nov 8, 2016 at 1:30 PM, Ronald King <ronald.king () morgan edu>
wrote:

Does anyone use a solution for Google Drive DLP?

Thank you,


*Ronald A. King, CISSP*
Chief Information Security Officer
Morgan State University Office: (443) 885-3372
1700 E. Cold Spring Ln. Email: ronald.king () morgan edu
Baltimore, MD 21251 URL: http://www.morgan.edu

*Growing the future ... Leading the world*
<http://www.morgan.edu/Documents/ABOUT/StrategicPlan/StrategicPlan2011-21_Final.pdf>


On Fri, Nov 4, 2016 at 3:35 PM, Thomas Dugas <dugast () duq edu> wrote:

Hello,

We are using Sensitive Data Manager (Identity Finder) and our Palo Alto
at the firewall.





Tom Dugas

Director, Information Security/New Initiatives

Duquesne University - Computing and Technology Services

412-396-6574

dugast () duq edu



*The information contained in this transmission may contain privileged
and confidential information protected by federal and state privacy laws.
It is intended only for the use of the person(s) named above. If you are
not the intended recipient, you are hereby notified that any review,
dissemination, distribution, or duplication of this communication is
strictly prohibited. If you are not the intended recipient, please contact
the sender by reply email and destroy all copies of the original message.*







*From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *Tom McMahon
*Sent:* Thursday, November 3, 2016 11:00 AM

*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* Re: [SECURITY] DLP Survey



We are using Symantec DLP for email to block confidential/sensitive
data, same as Harper, and also using it for data at rest scanning (DB’s,
file shares, web sites) for about the last 7 years, decent product, Exact
Data Matching (EDM) is one of our favorite features.



*Tom Mc Mahon*

Security Engineering Manager



*Weill Cornell Medicine*

Information Technologies & Services

1300 York Ave, New York, NY 10065



T 646.962.3362

tom2010 () med cornell edu



*From: *The EDUCAUSE Security Constituent Group Listserv <
SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Sue Contarino <
scontari () HARPERCOLLEGE EDU>
*Reply-To: *The EDUCAUSE Security Constituent Group Listserv <
SECURITY () LISTSERV EDUCAUSE EDU>
*Date: *Thursday, November 3, 2016 at 08:24
*To: *"SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
*Subject: *Re: [SECURITY] DLP Survey



We use Symantec DLP to quarantine outbound email that contains
confidential/sensitive information and to scan shared drives for the same
type of information.



Sue Contarino

Director, Client Systems

Information Technology

Phone: 847 925 6200

Fax: 847 925 6030

1200 W. Algonquin Road

Palatine, Illinois 60067



*From:* The EDUCAUSE Security Constituent Group Listserv [
mailto:SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>] *On
Behalf Of *McCrary, Barbara
*Sent:* Wednesday, November 02, 2016 5:09 PM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* Re: [SECURITY] DLP Survey



We use Cisco IronPort for email DLP and encryption and Varonis for
classification, discovery, access alerting and reporting.

*[image: id:image003.jpg@01D14954.D4A097F0]*

*Barbara McCrary*
Chief Information Security Officer
*MCSE, MCSE:Security, +Messaging*,* CompTia:Security+*

*bmccrary () osrhe edu* <bmccrary () osrhe edu>



Protecting data is a shared responsibility!



INSTALL antivirus and antispyware software.

USE strong passwords.

KNOW who you are dealing with online.

STORE confidential and sensitive data on encrypted devices only.

SHUT DOWN home computers or disconnect from the Internet when not in use.



Oklahoma State Regents for Higher Education
655 Research Parkway

Suite 200

Oklahoma City, OK  73104
405 225.9316 office
405 234.4321 cell
405 234.4588 fax



Note:  This communication and attachments, if any, are intended solely
for the use of the addressee hereof.  In addition, this information and
attachments, if any, may contain information that is confidential,
privileged and exempt from disclosure under applicable law, including,
but not limited to, the Privacy Act of 1974.  If you are not the
intended recipient of this information, you are prohibited from reading,
disclosing, reproducing, distributing, disseminating, or otherwise using
this information.  If you have received this message in error, please
promptly notify the sender and immediately, delete this communication from
your system.





*From:* The EDUCAUSE Security Constituent Group Listserv [
mailto:SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>] *On
Behalf Of *David D Grisham
*Sent:* Wednesday, November 02, 2016 3:30 PM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* Re: [SECURITY] DLP Survey



We are using McAfee DLP for data at rest and Cisco IronPort for email
DLP and encryption.

Cheers.-grish

*David Grisham*

David Grisham, PhD, CISM, CRISC,  CHS III

Manager, ITSecurity, UNM Hospitals, UNM Health Science Center

505.272.5657

Dgrisham () salud UNM edu







*From:* The EDUCAUSE Security Constituent Group Listserv [
mailto:SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>] *On
Behalf Of *Pardonek, Jim
*Sent:* Wednesday, November 02, 2016 2:22 PM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* [SECURITY] DLP Survey



Hello,



We are starting to go down the path of building requirements for
implementing a DLP solution.  I was asked by our leadership to poll other
universities to see if they have deployed a DLP solution and if so what
they are using.  We do already use identity finder to take care of and
contain data at rest. We are more looking at DLP for data in motion and for
cloud storage and email.



Any words of wisdom or advice would be greatly appreciated.



Thanks!



Jim





*James Pardonek, MS, CISSP, CEH*

*Information Security Officer*


* Loyola University Chicago  1032 W. Sheridan Road | Chicago, IL  60660 *
* (**: (773) 508-6086 <%28773%29%20508-6086>*

*[image: tandard_isc2_cissp]*



-- 
Mardecia S. Bell, CISO
Security & Compliance
Office of Information Technology
NC State University
2620 Hillsborough St.
Raleigh, NC 27695-7109

Phone: (919) 513-1194
Mobile: (919) 609-6474
Fax: (919) 513-7193
E-Mail: mardecia_bell () ncsu edu
Web: http://oit.ncsu.edu/

Note: *All electronic mail messages in connection with State business which
are sent to or received by this account are subject to the NC Public
Records Law and may be disclosed to third parties*

Current thread:

DLP Survey Pardonek, Jim (Nov 02)
- Re: DLP Survey David D Grisham (Nov 02)
  - Re: DLP Survey McCrary, Barbara (Nov 02)
    - Re: DLP Survey Sue Contarino (Nov 03)
- Re: DLP Survey Jeff Choo (Nov 03)
- <Possible follow-ups>
- Re: DLP Survey Tom McMahon (Nov 03)
  - Re: DLP Survey Thomas Dugas (Nov 04)
    - Re: DLP Survey Ronald King (Nov 08)
    - Re: DLP Survey Miguel Hernandez (Nov 08)
    - Re: DLP Survey Mardecia Bell (Nov 09)