Data Security Progress Report June 2013
Reporting Period Updates:
- Finalized drafts of RCE SLA, Incident Response, and Data Intake policy documents
- Tested configuration of secure network path to on-campus cloud resources
- Implemented utilities for periodic audit of confidential data ACLs
- Tuned HRCI detection tool to reduce false positive reports
- Planned for physical facility security improvements
- Closed plaintext authentication security hole in RCE FTP service
- Gained access to HUIT/I2C InCommons SSL certificate service to better secure private authentication services
- Finalizing a schedule for HRDSP Level 3 Security Office compliance audit
- Remaining for HRDSP-L3 compliance: 2 large technical projects, 2 small technical projects
