Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

An endpoint is defined as any laptop, desktop, or mobile device.

Follow the minimum security standards in the table below to safeguard your endpoints. NOTE: All personally owned endpoints that are use to access (store or transmit) University data are required to adhere to these Minimum Security Standards. 

STANDARDSRECURRING TASKWHAT TO DO ?LOW RISKMODERATE RISKHIGH RISK
PatchingApply security patches within seven days of publish. Use a supported OS version.
Whole Disk Encryption Desktops
 

Enable FileVault2 for Mac, BitLocker for Windows. Install MDM on mobile devices.

Whole Disk Encryption Mobile Devices
Enable FileVault2 for Mac, BitLocker for Windows. Install MDM on mobile devices.
Malware Protection and Intrusion Prevention
Install antivirus (Symantec End Protection (SEP) recommended).
Backups Back up user data at least daily. Encrypt backup data in transit and at rest.
InventoryReview and update records quarterly. Maximum of one node per record.
Configuration Management
 

TBD
  


Regulated Data Security Controls
 

Implement PCI DSS, HIPAA, FISMA, or export controls as applicable.
  


 
Two-factor Authentication
Require Duo

Require two-factor authentication for interactive user and administrator logins.


Security TrainingComplete annual Secure the Human Training. 

Short URL to this page: 


...

Live Search
sizelarge
additionalpage excerpt
placeholderSearch Answers
typepage

...

Filter by label (Content by label)
showLabelsfalse
max5
spacesSKB
showSpacefalse
sortmodified
reversetrue
typepage
cqllabel in ( "security" , "standards" , "endpoints" ) and type = "page" and space = "SKBSC"
labelssecurity standards endpoints

...