Home > 8 Spots for Tightening Security
on Campus

Article

8 Spots for Tightening Security
on Campus

1/21/2004

Security is a tough challenge these days in any environment. On college and university campuses, keeping data and systems secure is even tougher. That's true for several reasons: academic environments encourage open atmospheres that are conducive to security vulnerabilities; file-swapping remains a popular, if often illegal, activity for students; funds and personnel are usually spread thin; and many campuses run heterogeneous environments with a range of hardware and software, some owned by the school, some by the students. Adding wireless to the mix, as many schools now have done, compounds the problem.

Your challenge is to lock down your campus even under those conditions - while keeping your constituents reasonably happy with their access to information and services. It's a delicate balance, no doubt. To help you see how your peers are handling security, Syllabus talked with CIOs, Chief Security Officers and other IT managers at several institutions about their top concerns and how they're addressing them. From those discussions, we've put together the following list of security hot spots. You may find some of the ideas very useful; the rest may simply give you a sense of kinship with others in IT who are facing the same challenges you do in securing their own campuses.

1. Educate Every User

Nearly everyone we spoke with brought this up. Any IT administrator needs to spread the word on secure computing practices, but compounding your challenge is that a portion of your user base turns over each year, leaving you with a new set of customers to educate. You also must grant rights to technology resources initially, and probably adjust them during the year. Finally, you need to reclaim a student's access quickly once the student leaves school.

Ariel Silverstone, chief information security officer at 35,000-student Temple University outside Philadelphia, finds security awareness to be his No. 1 challenge. Unlike in a government or corporate environment, where the need for security is obvious, he points out that universities must work with users who are accustomed to open environments and often don't even think about security concerns. For example, "students today have always been able to download MP3" files, Silverstone points out, and many take file-sharing technologies for granted without considering how security might be compromised.

Silverstone says that Temple has successfully used a variety of methods to educate users on computer security, including posters, e-mail blasts, brochures, seminars, and a recent "security day" on campus that featured Pez containers shaped like bugs.

At the Rochester Institute of Technology, CIO Diane Barbour described similar ongoing education efforts, such as a recent "security week" that included students and faculty helping to present seminars on security. One focus: What users themselves can do to secure their own systems, as well as how the IT department can help.



Recommended Reading
  • Microsoft Unveils Exchange and SharePoint as Services

    Microsoft exec Stephen Elop on Monday announced two hosted solutions from Microsoft--Exchange Online and SharePoint Online--which are now available to organizations of all sizes in the United States. The software, paid for by annual subscriptions, is hosted on Microsoft's servers and supported by Microsoft's channel partners.

  • 6 Ways Not To Become Rote Using Instructional Technology

    There are, in my experience, six strategies to consider with any use of technology that will guard against rote use of technology and facilitate critical analysis of teaching and learning effectiveness. In this article, I'll share with you the checklist I work with and encourage others to work with in learning about and using new technology.

  • Bringing Student Web "Stuff" to Campus Enterprise Systems

    How can an institution incorporate Web 2.0 learning opportunities for students, and evidence of learning from those opportunities, into existing campus technologies and processes? PlugJam is providing part of the answer.

  • Delta iTunes U Helps Meet Student Expectations for Web 2.0 Apps

    As part of a strategy to meet students' expectations to experience interactive Web 2.0 applications in their learning environments, Delta College in Michigan launched an online Delta iTunes U site this fall.

  • Tipping Point for "Content"--Dynamic Interaction, Not Static Stuff

    The word "content," as used in education, is troublesome for many educators today who see education as a constructivist process, an interaction between knower and learner, and as a student-centered activity.

  • Penn State Pilots Proctored Online Testing System from Kryterion

    The Pennsylvania State University's World Campus and Kryterion have gone public with results of a pilot in which students completed proctored exams online using Webassessor Online Secured Testing. The technology is intended to deliver tests without the need for an in-room proctor present.