Dear Colleagues,
October is National Cyber Security Awareness Month. Here’s a resource I’m passing on from HEISC that may be useful.
-Larry Conrad
_____________________________________________
This EDUCAUSE constituent group is designed for discussion of issues and challenges that affect chief information officers in higher education: the role of the CIO, financing and funding strategies, planning and organizing for information resources (especially information technology) within the institution, human resource issues, policies for the networked information environment, and the future of higher education. This group meets at the EDUCAUSE annual conference and uses the electronic discussion list to discuss issues throughout the year.
All participants must follow the Participation Guidelines.
If you have questions or concerns about this listserv, please e-mail cg@educause.edu.
Dear Colleagues,
October is National Cyber Security Awareness Month. Here’s a resource I’m passing on from HEISC that may be useful.
-Larry Conrad
_____________________________________________
Good Afternoon,
Do you have a new CISO or ISO on staff, especially one who’s new to higher education? Or, is your ISO looking for a peer to touch base with?
In conjunction with the Security Professionals Conference, a subcommittee has formed to develop a mentoring program for new security managers, directors, and ISOs. We will begin with a small pilot group between November and February and gather feedback with the initial group. This is our first foray into asking for program participants and we hope there is interest in this mentoring opportunity. Participants will be matched with an experienced mentor in areas where your ISO is seeking help.
Please contact security-council@educause.edu for more information by October 16.
Best,
...Dear Colleagues:
Here at Hopkins, we have been plagued with problems relating to the integration of iOS devices (iPhone, iPad, etc.) and our Microsoft Exchange servers. The most egregious problems are related to calendar synchronization with appointments disappearing from a device leading to unreliable calendars. The more this is happening to our senior leadership and our faculty, the worse it gets for IT! I am aware that this is a widespread problem, not one unique to us or our environment. Today, I heard of an organization (not a university) that moved its executives back to Blackberries because they were far more reliable. I was curious how prevalent the problem has become on other campuses and what, if anything, you have been able to do about it.
Thanks for your consideration.
...Security Reminder: Always protect...
We currently have a mass email policy that requires any email sent to large groups, e.g., all faculty, to go through an approval process and then be sent out by either the Chancellor or the Provost (or folks involved with emergency management). Our faculty senate chair has requested permission to send to these groups also without going through the approval procedure.
How do other campuses facilitate communication like this while still staying away from broadcast email that may or may not be relevant?
Mary Lou
Mary Lou (Hines) Fritts
CIO & Vice Provost
University of Missouri-Kansas City
816.235.1107
816.235.5509 fax
...We’re considering moving forward with a SIEM package implementation and I’d like to know if any of you use such a tool in your environment and if so maybe you can answer the following?
What was the impetus for considering SIEM?
What were your (broad brush) criteria (flow analysis, file integrity, general security, log aggregation, PCI compliance, etc) for choosing the product you chose?
How many staff are involved with the day to day monitoring and action of monitored events?
Are you pleased with the tool you chose and why?
Thank you
Jamie Arnold
Binghamton University
...Our institution is looking at implementing several HD video conferencing sites (h.323).
Is there any kind of HD Directory out there or other simple way of identifying whom has h.323 capabilities and wants to connect?
Chad Robinson
Director of IT Services/CIO
Western State Colorado University
600 N. Adams Street
Gunnison, Colorado 81231
970.943.3123
www.western.edu
crobinson@western.edu
I’m reviewing our password reset policy. Currently our policy is to require users, via password expiration, to change their password every 60 days. Based on anecdotal evidence I gathered from faculty and staff who have recently come to Knox from other I believe our reset interval is shorter than most other Colleges and Universities. However, I have gotten answers that range from 30 days to annually, and a single, “I never had to change my password…”.
We also have complexity and history policies in place, but the one I am most frequently “challenged” on the expiration period. Would any of you be willing to share what your expiration period is? If it is 90 days or under would you also share your rationale?
Thanks,
...
Good Afternoon,
I came across this issue today and I was curious how the community handles this situation. We sent out an RFP for HRIS software and had one vendor send us an NDA stating that they always request an NDA prior to responding to RFP’s. I have been doing RFP’s for 20 years, and aside from a request to keep the RFP confidential, I have never been asked to sign a NDA…
Is this unusual, or have I simply missed the vendors that make this request?
My first reaction is that this is an interesting hurdle that the company has erected to prevent an easy flow of business… after all, if the secret sauce was that good, why not patent it like a host of other companies?
Best regards...
Colleagues,
Is anyone using an off the shelf application to track grievances for union staff electronically at their campus? I am looking for your experience and recommendation. Thanks.
Fouad Yatim
Associate Chief Information Officer
Information Technology Services
8 Ashburton Place
Boston, MA 02108
Tel: 617.573.8585
Fax: 617.573.8747
Note: This E-mail message is confidential, intended only for the recipient(s) named above and may contain information that is privileged, exempt from disclosure under applicable law. If you have received...
http://www.cisco.com/en/US/netsol/ns1051/index.html
I am looking for anyone who might be able to provide some feedback on the Cisco TrustSec product. We are looking into NAC and this is one of the vendors we are looking at.
Mike Cunningham
VP of Information Technology Services/CIO
Pennsylvania College of Technology
This topic generated much more dialog than I thought it would. There were a couple sub-topics that were spawned as well.
With regards to MIGRATING FROM ON-PREMISES EXCHANGE TO OFFICE365, a number of people were interested in sharing their experience, and an even larger number of people were interested in being kept apprised of any conversations on the topic. In an effort to try to meet both interests, I have scheduled a 1 and a half hour long conference call on the topic for Wednesday, March 6th at 10am CST. There were people on the Pacific Coast and in Europe were who interested, so I tried to schedule a time that would inconvenience all equally. J I tried to schedule it far enough in the future that you all might be able to adjust your schedules to attend, but not too far out.
If...
I’ve been approached by a county department that would like to rent rack space at the college for their DR site. I’ve got available space, but don’t have a clue on what I should charge them. I’m guessing companies that do this charge so much per “u”. The county dept. is willing to bring in their own fiber so they wouldn’t be using the college’s bandwidth.
If your college does this I’d like to hear from you or if you rent space for your DR I’d like to know that the going rate is.
Thanks
Jim
Jim Mahlberg
Director of Information Technology
Iowa Western Community College
712-325-3218
...
Hello all,
I wanted to reach out to see if anyone has recently (within 2 yrs. or so) gone through an assessment and selection of Research Administration Systems (Kuali Coeus, InfoEd, Click Commerce Etc.) and would be willing to share their results. We are currently looking at which direction we are going to go in this area for replacing our home grown system after 20 years and want to see if anyone else has gone through this process that we can get some experience from.
This was previously posted to the Research Computing Constituent Group so I apologize for any cross-post but I wanted to see if I could get some additional responses.
I’d be happy to share what I gather with anyone who is interested and may also be looking at this space.
...
Robert,
Cornell uses the community source platform known as Kuali Mobility. It is device agnostic due to its underlying HTML5 technology and can be test-driven from here: https://kuali.org/mobility. Currently two other schools – U. Michigan and Indiana U – also use the platform, with other institutions in planning mode. If you have BYOD issues, I think you’d find it worth a look.
…Ted
Ted Dodds
CIO and Vice President
Cornell University
Thanks Theresa. Hope no one minds me sharing a few of my own favorites below. I would also be interested in hearing others.
· “We can’t solve problems with the same thinking that we used to create them.” Albert Einstein
· “Opportunity is often missed by most people because it is dressed in overalls and looks like work” Thomas Edison
· “The right things are done for the right reasons, at the right time, and in the right way. Missing rights risk being wrong.” Unknown
John M. Bax (baxj@mst.edu)
...Having just gone through Hurricane Sandy and a northeaster a week later, we are feeling a bit of pressure about disaster planning here on Long Island. Actually Molloy faired very well but could not connect to the outside for multiple days because our ISP was without power…. One topic that has come up was that cell phones don’t work either, when the cell towers don’t have power, and when the traffic to them is at a maximum.
So my question is how many of you have satellite phones deployed on you campus? How many do are deployed? How are they managed? And anything you’d like to say about the topic!!!
If I get a bunch of good information I’ll summarize and repost…
Thanks,
Rob
...
Hi all,
We are in the midst of a major upgrade to our Banner infrastructure, moving from HPUX to Linux and from physical to virtual servers. I would like to be able to put the new system under some significant load in order to ensure that the new environment will perform as expected. Has anyone on the list developed an effective process or found a third-party vendor that can perform a large-scale load test of Banner, ideally both INB and web self-service? Thanks in advance.
Chris Gill
Chris Gill
Chief Information Officer
Gonzaga University
502 E. Boone Ave.
Spokane, WA 99258-0095
509.313....
Good day,
Do you have or know of any resources for 360 degree feedback questions as it pertains to a CIO? I’m looking for questions we can send to internal and external customers, suppliers, and related groups. Thanks.
- Mac -
Keith W. McIntosh, MBA
Vice Chancellor for Information Technology
and Chief Information Officer (CIO)
-------------------------------------------------------
Information Technology
Pima County Community College District
kwmcintosh@pima.edu
The University of Tennessee at Martin extends lifetime email to faculty/staff retirees.
In addition, we have recently been asked whether or not to allow retirees to retain personal web pages as well. I would be interested in knowing what other higher education institutions do with these?
Thanks,
Terry
---------------------------------------------------------------------------
Terry Lewis
The University of Tennessee at Martin
Interim Chief Information Officer
Information Technology Services
215 Hurt Street
127 Crisp Hall
...