Educause Security Discussion mailing list archives

Re: Use of Personal Computers for Work


From: John Bradley <bradlejp () PLATTSBURGH EDU>
Date: Wed, 26 Feb 2020 14:39:27 -0500

Hi Ron,
    Hope all is well at good ole Saint E's (two family members went
there).  In answer to your question, here it depends on security scope of
the service or asset.  Certain resources can only be reached from
institutional machines and so on.  Not comprehensive but aligns to some
fashion of threat assessment.
    In terms of a personal machines being a bad idea, no argument.  Can you
force them into a DMZ?  Most services the average users needs are web-based
for our campus.  The risk to the staff personal device would be the same as
any other public connection but might tamp down the campus' exposure.
    As for policy, have you looked at NIST 8--53 or 800-171?  Some
alignment with accepting Federal Financial Aid (Dear Colleague letters).

  --

JOHN BRADLEY
(He, Him, His, Himself)
Assistant CIO/ Associate Director of Computing Services
0217 Feinberg
101 Broad Street
Plattsburgh, NY 12901
(o) 518-564-2435 <+1-518-564-2435>
plattsburgh.edu <https://www.plattsburgh.edu/>
[image: Facebook Logo] <https://www.facebook.com/sunyplattsburgh> [image:
Twitter Logo] <https://twitter.com/sunyplattsburgh> [image: Instagram Logo]
<https://www.instagram.com/sunyplattsburgh/> [image: Snapchat Logo]
<https://www.snapchat.com/add/sunyplattsburgh> [image: LinkedIn Logo]
<https://www.linkedin.com/school/suny-plattsburgh/>
[image: SUNY Plattsburgh Logo]



**This email message, including any attachments is for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. If you are not the intended recipient, please contact the
sender by email and destroy any copies of the original.  Thank you.**

On Wed, Feb 26, 2020 at 1:53 PM Ronald Loneker <rloneker () cse edu> wrote:

Hi Everyone -

I'm curious as to whether you have policies on your campuses requiring the
use of institutional-owned computers for work and how effectively you might
manage this faculty as well..

I've been saying to people it's bad security practice to be letting people
use their own laptops (especially on the staff side) but it might be time
to formalize something before people start thinking too much about going in
this direction.

Any thoughts you might have on this would be greatly appreciated as well
as any policies on this that you might be willing to share.

Thank you in advance!

Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229

e-mail:  rloneker () cse edu






**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: