Educause Security Discussion mailing list archives

Re: [EXT] [SECURITY] Guidelines for Taking University Equipment Home


From: Ben Marsden <bmarsden () SMITH EDU>
Date: Wed, 13 May 2020 08:42:29 -0400

similar to others,  we required that any desktop systems and/or peripherals
(2nd monitors, speakers, web cams, etc) be registered by filling out a
form, so we would have it all documented.  (Stating the obvious,
institution-owned laptops were exempt since they by definition are mobile
devices.)
   We requested a reason / justification for the need, but I don't think
there was an actual review of them or any denials of requests.    We'd
surely rather they used their Smith equipment than their old home computer
that's who knows how many layers of unprotected it would be, and used by
all the household members to potentially visit the slimiest places one
might stumble upon...

-- Ben

On Tue, May 12, 2020 at 5:13 PM Menne, Michael S <michael.menne () mnsu edu>
wrote:

As with SDSU, we didn’t have time to plan anything. We vacated the campus
in about 2 days. Anything that is of value (permanently holds sensitive
data) is already tagged and tracked by department, department head, and
individual responsible for the equipment.  We didn’t have time to go
through any other procedures.  We will have to rely on our asset tracking
data.  It’s not great, but I’ve been working hard over the last 5 years and
have dramatically improved it.





*Michael Menne, CISSP*

*Chief Information Security Officer*

*IT Solutions Information Security*

*Minnesota State University, Mankato*

*Phone:  (507) 389-5705*

*www.mnsu.edu/its/security
<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.mnsu.edu%2Fits%2Fsecurity&data=02%7C01%7Cmichael.menne%40mnsu.edu%7C00f2f1afdcf544ac511508d758826763%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637075189428878307&sdata=%2FUAwDG0vB%2BVztf92DOtb6gMc78WzZhdfsjAyBSKlbHU%3D&reserved=0>*

*minnstate.zoom.us/j/5073895705 <https://minnstate.zoom.us/j/8364614046>*



[image: signature_2008603909]



*Confidentiality Notice: This e-mail message, including any attachments,
is for the sole use of the intended recipient(s) and may contain
confidential and privileged information.  Any unauthorized review, use,
disclosure or distribution is prohibited.  If you are not the intended
recipient, please contact the sender by reply e-mail and destroy all copies
of the original message.*







*From: *The EDUCAUSE Security Community Group Listserv <
SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Gene LeDuc <gleduc () SDSU EDU>
*Reply-To: *The EDUCAUSE Security Community Group Listserv <
SECURITY () LISTSERV EDUCAUSE EDU>
*Date: *Tuesday, May 12, 2020 at 4:08 PM
*To: *"SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
*Subject: *Re: [SECURITY] [EXT] [SECURITY] Guidelines for Taking
University Equipment Home



SDSU basically said to take what you need, but it had to be documented on
equipment forms.  We only had a couple of days to vacate the campus, so
there wasn't a lot of time for planning.  Our ITS department and a sister
campus provided loaners to faculty and students as well.



Gene





On Tue, May 12, 2020 at 1:58 PM Pardonek, Jim <jpardonek () luc edu> wrote:

Greetings and I hope everyone is staying safe.



We have been getting numerous requests, mostly by research faculty to take
their desktop computers home with them for the duration of the work from
home portion of the pandemic.  I’ve been asked to provide some guidelines
to our COVID working group and would like to know if anyone has something
already done that they would be willing to share.



Appreciate the help.



Thank you!



Jim



*James Pardonek, MS, CISSP, CEH, GSNA*

*Associate Director*

*Chief Information Security Officer*


* Loyola University Chicago  1032 W. Sheridan Road | Chicago, IL  60660 *
* (**: (773) 508-6086*



*Loyola University Chicago will never ask you for your username or
password.*

*For the latest information security news at Loyola, please follow us
online,*

*Twitter: @LUCUISO*

*Facebook: https://www.facebook.com/lucuiso/
<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2Flucuiso%2F&data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C1de7417994e041d793b508d7f6b88d45%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637249144829803408&sdata=Z6xxx4u1xfDCaA%2FDnVU0yby1d38rtvwVb0crArRJsCM%3D&reserved=0>*

*Our Blog http://blogs.luc.edu/uiso/
<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fblogs.luc.edu%2Fuiso%2F&data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C1de7417994e041d793b508d7f6b88d45%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637249144829803408&sdata=EnM6TEKSupfI7%2Fea8n%2FhlXQWYoiLHmzk9bR6wzzAcbo%3D&reserved=0>*



**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community
<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C1de7417994e041d793b508d7f6b88d45%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637249144829813397&sdata=yKaV9iDQbCDxDfWLef49OfBp6Yvr42hVGPReCKqWgsY%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community
<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C1de7417994e041d793b508d7f6b88d45%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637249144829813397&sdata=yKaV9iDQbCDxDfWLef49OfBp6Yvr42hVGPReCKqWgsY%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community



-- 
[}--> BEWARE of links and attachments in email!   *  Stop, Think before you
click *
============================================
Ben Marsden : Information Security Director, CISSP
ITS, 201 Stoddard Hall, Smith College, Northampton, MA 01063
---------------------------------------------------------------------
=-->

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: