Information Security

SPECIAL NOTE (July 28, 2008)

Recently there have been a large number of email messages sent to staff, faculty, and students of Minnesota State University, Mankato claiming to be from the ITS department and asking for sensitive information.  Everyone on campus should be aware that the ITS department will not ask for your password or other sensitive information over email.  If you receive an email asking for such informaiton, you should disregard the message.

Overview

Information Security deals with the Confidentiality, Integrity, and Availability of the University's information assets. Services provided to the campus include:

• Development of policies and procedures
• Incident response, investigation, and mitigation
• Security consulting for new products and services
• Public awareness training

Current policies, procedures, and standards

• MnSCU Acceptable Use of Computers and Information Technology Resources Policy
  • MnSCU Acceptable Use of Computers and Information Technology Resources Procedure
• MnSCU Security and Privacy of Information Resources Policy
  • MnSCU System Guideline 5.23.1.1 Password Useage and Handling
  • [PDF] Campus Secure Password Standard (9 KiB)
  • [PDF] Security Incident Response Procedure (341 KiB)
  • [PDF] Forensic Acquisition of Windows Computers Procedure (30 KiB)
• [PDF] Campus System Hardening Policy (33 KiB)
  • [PDF] Internet-accessible Server Security Standard (42 KiB)
  • [PDF] Network-attached Printer Security Standard (288 KiB)
  • [PDF] University Encryption Standard (69 KiB)

Forms

• [PDF] Student Employee Guidelines and Non-disclosure Agreement (53 KiB)
• [PDF] Notification of Copyright Rules and Regulations (30 KiB)
• [PDF] Request for Security Policy Exception Form (23 KiB)

Tutorials

• Encrypting documents with Office 2007

Contact

Kevin Thompson, CISSP
Information Security Manager
Minnesota State University, Mankato
507-389-5033
kevin.thompson@mnsu.edu
http://mavdisk.mnsu.edu/kevin