Data Security Progress Report July-August 2013
Reporting Period Updates:
- Issued and tested InCommons SSL certificates to better secure private authentication services
- Extended authentication service schema to support timed expiration of grants of access to confidential data
- Revised data intake procedure to record authorizing party for confidential data access
- Removed all non-essential replication of highly sensitive authentication data
- Reviewed staff departure notification and business data storage procedures with local HR
- Attended seminar on extending services securely to Amazon cloud computing
- Consulted with HUIT on establishing first-of-its-kind enterprise VPN service for secure cloud computing
- Vetted use of popular Dropbox software with HUIT Security Office
- Tested customized HRCI detection tool on live data
- Tightened controls on access to information in helpdesk ticketing system
- Server Operations team presented on Information Security Hygiene to CGIS community
- Rounded up outstanding security concerns pertaining to existing services beyond compliance scope
- [none new]
- Remaining for HRDSP-L3 compliance: 2 large technical projects, 2 small technical projects
