Educause Security Discussion mailing list archives

Re: Locking Computer Policy


From: Ronald Loneker <rloneker () CSE EDU>
Date: Mon, 6 May 2019 10:18:09 -0400

Sorry for the delay in responding - it's the end of the semester and I'm
busy with preparations for Commencement among my other responsibilities.

This is very helpful - thanks a lot!

In addition to the statement that you sign about locking screens, do you
sign a separate confidentiality agreement as well?

Ron
-----------------------------------
Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229

e-mail:  rloneker () cse edu



*CSE's IT department will never ask for your password, social security
number or other personal information in an e-mail message.*
*Please do not share any information with others!*






On Thu, May 2, 2019 at 8:17 AM Tom Miller <thomas.miller () cnu edu> wrote:

15 minutes here a well.  In my department (internal audit), we also sign a
statement annually, part of which indicates that the screen lock should be
engaged if the employee leaves his or her desk.  We also have adopted NIST
controls which specify application/screen locks.

On Wed, May 1, 2019 at 6:44 PM Ronald Loneker <rloneker () cse edu> wrote:

Hi Everyone -

We looking to set up a group policy to push out to some of our end users
to automatically lock a computer after a certain period of inactivity -
especially in departments that have elevated privileges or access to
sensitive data.

We are noticing some people not following procedure on this, and we want
to take action.

What best practices are you using at your institution in terms of the
amount of time before a computer locks automatically during inactivity?

Thanks in advance for your thoughts on this.

Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229

e-mail:  rloneker () cse edu



*CSE's IT department will never ask for your password, social security
number or other personal information in an e-mail message.*
*Please do not share any information with others!*







--
Tom Miller, MBA
Internal IT Auditor
Christopher Newport University
1 Avenue of the Arts
Newport News, VA  23606-3072
Phone:  757-594-8610
E-mail:  thomas.miller () cnu edu


Current thread: