January 2008 IT News

RSS feed

New Compliance Office for Campus

A new office has been created to ensure that campus departments and employees are dealing with private sensitive information appropriately and complying with all IT rules and regulations.

The mission of the University of Utah OIT Compliance Office is to support the University in its goals of teaching, research, patient care, and public life by assuring a comprehensive and integrated approach for access, integrity, availability, secure and appropriate use of information and information systems.

The strategic direction and tactical implementation of this mission are accomplished through the University Information Security Office and University Privacy Office, both divisions within the OIT Compliance Office:

  • Auditing & Assessments
  • Business Continuity Facilitation
  • Compliance with Applicable Law, Regulation, or Requirement
  • Communications & Awareness
  • Incident Management
  • Investigations & Enforcement
  • Pro-Active Risk Management Program
  • Policy, Procedure, Standards, and Best Practices
  • Training and Education

The Compliance Office is located at 650 Komas in Research Park. Chris Kidd is the Chief Compliance and Information Security/Privacy Officer. Education efforts and specific training programs will be widely available by summer 2008.

If you have concerns about private sensitive data for which you are responsible, or if you need to report an incident, please visit the Compliance Office website at www.compliance.utah.edu (currently under construction) or contact them at compliance@utah.edu or 587-9241.

 

New IT Project and Portfolio Management Office

The recently formed IT Project and Portfolio Management Office will have the responsibility of organizing and managing resources so that campus IT projects are completed within a defined scope, time and cost constraints.  

Mission
The objective of the IT Project and Portfolio Office is to optimize the university’s IT projects and portfolios in order to contribute to the organization’s successful performance and its sustained viability, value and growth.  The objective is to further develop and implement well defined and formally adopted governance structures, practices, tools, and processes for investment reviews, and applications performance monitoring. 

IT Project and Portfolio Management Defined

Project
IT Project Management is the discipline of organizing and managing resources in a way that the project is completed within a defined scope, quality, time and cost constraints.  It is the application of knowledge, skills, tools and techniques to project activities to meet the project requirements.

Portfolio
 IT Portfolio Management is defined as a strategic and dynamic decision-making process used to assess value, prioritize actions, and allocate resources to meet key university objectives.  An IT portfolio is a collection of projects and initiatives grouped together to facilitate efficient and effective management so that fiscal, staffing, and other scarce resources can be optimally allocated to provide the most benefit or greatest value for investments made. 

Joe Taylor directs the IT Project and Portfolio Management Office.  For more information concerning this new IT Project and Portfolio Management Office, please contact Kimball Lovin (klovin@acs.utah.edu) or Rene Eborn (reborn@acs.utah.edu).

 

Fiscal Year 2009 Campus Backbone Network Charges


The campus network backbone supplies campus buildings with access to the campus network and internet via a series of switches and routers. Most departments and buildings on campus have an IT Manager that manages the building's internal local area network (LAN).

Funding of the network backbone has always been shared by all departments on lower campus, Health Sciences, and the hospital. The funding model is based on FTE (full time equivalent) count per Home Department ORG. FTE information is obtained from Human Resources department records from the month of November of each year. Charges for campus backbone network appear on your monthly telephone bill as Backbone Network.

Your department's backbone contact will be receiving an email in the next week or two to inform you of your Campus Network Backbone charges for FY 2009. If you have questions, please contact OIT's Michelle Foulger at 581-5520.

 

Note: The following is part of a regular series on security from the Information Security Operations office.

Security Tips for End Users - the SANS Ouch! Newsletter

ISO recommends the SANS Institute Ouch! Newsletter. The SANS Institute is a highly regarded IT security organization. Their Ouch! newsletter is the first consensus monthly security awareness report for end users. You can find out what to look for and how to avoid phishing and other scams plus viruses and other malware -- with the latest attacks as examples. Current and past issues are available, and SANS allows you to distribute OUCH to all your users through forwarding or subscribing a single address that is a mailing list.

In the January 2008 Ouch! issue, New Year's Computer Security Resolutions:  

THIS YEAR I WILL:
1. Install good-quality anti-virus software, anti-spyware, and a software firewall;
2. Patch and update my security software, operating system, and software applications regularly and promptly;
3. Learn how to recognize suspicious web addresses;
4. Beware of lesser-known security issues, such as cellphone "bluesnarfing;"
5. Be careful when using any wireless network--at home or on the road.
 
THIS YEAR I WILL NOT:
1. Open email attachments unless I know who sent the message and what is in the attachment;
2. Click on links embedded in emails unless I know who sent the message, what the link is for, AND where it will take me;
3. Fall for official-looking emails that ask for personal or financial information;
4. Fall for free offers of copyrighted materials which  may be tainted with malware, and BTW, may be illegal to use;
5. Participate in online social networking‹or allow my children to without knowing the risks.

Find it online at http://www.sans.org/newsletters/ouch/issue/20080115.php?portal=b281cb24d7c639bbd57df8c0f8309308.

For security-related issues and information, the Information Security Operations office invites you to visit http://iso.utah.edu/security/.

 

top