#  Data Security Progress Report July-August 2013 

 





September 11, 2013

 

 

 **Reporting Period Updates:**

- Issued and tested InCommons SSL certificates to better secure private authentication services
- Extended authentication service schema to support timed expiration of grants of access to confidential data
- Revised data intake procedure to record authorizing party for confidential data access
- Removed all non-essential replication of highly sensitive authentication data
- Reviewed staff departure notification and business data storage procedures with local HR
- Attended seminar on extending services securely to Amazon cloud computing
- Consulted with HUIT on establishing first-of-its-kind enterprise VPN service for secure cloud computing
- Vetted use of popular Dropbox software with HUIT Security Office
- Tested customized HRCI detection tool on live data
- Tightened controls on access to information in helpdesk ticketing system
- Server Operations team presented on Information Security Hygiene to CGIS community
- Rounded up outstanding security concerns pertaining to existing services beyond compliance scope
 
 **Open issues, questions, or needs**- \[none new\]
 
 **Metrics/Attachments**- Remaining for HRDSP-L3 compliance: 2 large technical projects, 2 small technical projects
 


 

 

 



 

 

 Share on:- [     Facebook ](#)
- [     Twitter ](#)
- [     Linkedin ](#)