| The direction of the
College’s communications and computing environment is clear:
networking and computing security are of paramount concern. This
approach is predicated on the knowledge that open networking environments
are subject to compromise, theft of service and intellectual property
espionage.
Organizationally, the College has deployed a comprehensive security in-depth model throughout all departmental facilities.
Every element implemented focuses on closing our communications and computing environment's vulnerabilities
and back doors.
New College Communications and Computing Policies
exist and are consistent with contemporary computing concerns and
issues. These policies were reviewed and approved by the College
Security Committee and the Dean’s Office. Although a more
controlled environment is the result of these policies, the business
of College in administrative, educational and research is impacted,
faculty and staff will still have the ability to perform critical
communications and computing activities. The following is a list
of official College communications and computing policies:
With the implementation of these revised and new
policies, the College is embracing the philosophy of security in
depth. Although this policy set reflects a major paradigm shift,
every effort has been made to ensure essential services and research
initiatives will not be negatively impacted. It is clear that the
College must maintain consistency in firewall management and rule
establishment coupled with timely administration are essential for
maintaining secure communications links and trusts. It is recognized
that there will be times when exceptions to firewall rules need
to be granted on a temporary, semi-permanent or permanent basis;
for these special cases, there is an additionally established procedure
and policy for considering the implementation of firewall rule exceptions.
The most notable and recent updates to the policies include those relating to critical data backups, incident response and disaster tolerance/recovery and the academic instruction high performance computing cluster. Furthermore, modifications of existing policies address the issues surrounding the possibility of the compromise of sensitive data on portable or remote systems.
All faculty and staff in the College of Engineering are governed by these policies and are responsible for review and understanding of the elements contained herein.
Questions or suggestions for improving Penn State University College of Engineering Computing Policies can be directed to ComputingPolicy@engr.psu.edu
Last Updated: 3/5/2007
|