| Project Overview
The University has embarked on an information technology
security initiative to better protect the private information
and data of the faculty, students and staff from unauthorized
uses. This effort will also result in the development, enforcement
and compliance of new rules and regulations needed to insure
IT security on campus. This new initiative will be consistent
with recommendations from the UNC Office of the President
and the Blackwell Consutling Services infrastructure study,
and requirements identified by the NC State Auditor’s
Office, as well as other state and federal regulations. The
new IT security approach will be based on a two-tiered system,
as recommended by the UNC NetStudy baseline recommendations.
An FAQ section on the project is being developed. For more
information, click here.
In order to facilitate this change,
the IT Division has started the following initiatives to
coincide with the national cyber-security awareness month.
- External Firewall Implementation - The University
will implement a new firewall system between the campus
network and the Internet, to protect systems and users
from un-wanted outside attacks, viruses and other forms
of electronic interference.
- Internal Firewall Implementation – The University
will implement an internal firewall to protect the University’s
core servers, applications, and data storage. This will
help ensure the integrity of these systems, and the privacy
of faculty, student, and staff information.
- Secure Remote Access – The University will
implement a secure method of providing access from the
outside into the core systems. Virtual Private Network
(VPN) technology will be used to provide access for trusted
sites and users.
- Security Policy Development – Revised security
policies and procedures will be developed and communicated
to all users of electronic equipment that in any way attach
to the campus (both on and off campus) and use any of the
electronic infrastructure, services or systems. These policies
and procedures will be designed to ensure that the transfer
and storage of data is secure. Current policies and procedures
will be utilized whenever possible.
- Collaboration – During the policy development
process, the team will work with faculty and other stakeholders
to ensure that the over-riding academic freedom, collaboration
and community of the University is maintained while also
maintaining privacy and security of users’ data.
- Exceptions - A procedure for exceptions to these
IT security policies will be in place and communicated
to the campus community. This will include a review policy
and statement of review.
|
