Windows Vista issues discussed at SIRT Roundtable
by H. Townsend. interim IT security officer
published Jan. 16, 2007
More than 30 people met to discuss Microsoft's new operating system, Windows Vista, at the monthly SIRT security roundtable
Jan. 12 in the Union. Topics included the different versions of Vista and their availability, security features in Vista,
Trend Micro antivirus software for Vista, SIRT recommendations, and other issues people have encountered with Vista.
The PowerPoint presentation
from the roundtable is now available online.
Vista has many enhanced security features over previous versions of Windows and will be available to the commercial market
after Jan. 30, but SIRT still does not recommend upgrading to Vista, primarily because Trend Micro does not yet have a
version of its OfficeScan security software for it. Roundtable participants were urged to thoroughly research and test Vista
and carefully plan the transition to this new operating system, especially in relation to configuring the security features.
They were reminded that K-State IT policy prohibits running a computer without antivirus software, hence the need to wait until
Trend Micro releases version 8.0 of OfficeScan that will support Vista, which is expected in the second quarter of 2007
(i.e., April-June).
To sum it up in one sentence, don't be in any hurry to deploy Windows Vista. But do read this issue's related article,
Microsoft on campus Feb. 6 to discuss Windows Vista.
Microsoft has published an excellent
Windows Vista Security Guide
that all K-State system administrators should read as they plan Vista deployment and use as a reference after deployment.
Other links of interest:
Microsoft on campus Feb. 6 to discuss Windows Vista
by H. Townsend. interim IT security officer
published Jan. 16, 2007
Microsoft representatives will give two presentations at K-State on
Windows Vista on Tuesday, Feb. 6, in Union 212:
- The morning session (10-11:30 a.m.) will provide a
general overview of Windows Vista and Internet Explorer 7 features,
versions, security, and licensing.
- The afternoon session (1:30-3:30 p.m.) will go into more detail and be
geared towards technical support staff, covering topics like specific security technologies,
deployment/installation issues, volume license activation, and general Q/A.
Both sessions are open to all K-Staters. Watch InfoTech Tuesday for more details.
Dreamweaver and CSS Exchange Workshop Jan. 18
by C. Rodriguez, Information Technology Assistance Center
published Jan. 16, 2007
This hands-on workshop -- scheduled 1:30-3:30 p.m. Thursday,
Jan. 18 -- is designed to be an informal forum for K-Staters to share
tips, expertise, and
techniques with their peers and to learn from other Dreamweaver users at
K-State. The moderators will share a few tips and encourage attendees to
ask questions, share their ideas and techniques, or lead a discussion. Initial
topics include:
- Photo Albums
- Creating and Styling Forms
This workshop will be one to two hours, depending upon the discussion and
topics being shared. See the
registration
form to register, submit ideas for discussion, or volunteer to lead a
topic discussion.
K-State Online training tutorials available
by C. Rodriguez, Information Technology Assistance Center
published Jan. 16, 2007
Do you need to brush up on your K-State Online skills, but don't have time
to make it to a class? Sign up for online tutorials instead. The
following tutorials are available to K-State faculty, staff, and graduate
teaching assistants:
- Getting Started with K-State Online (create course, import roster)
- Creating an Advising Space
- Creating an Online Assignment
- Creating a Timed Assignment
-
- Creating a Manual Assignment (grades that are manually recorded for classroom assignments)
K-State Online
reference guides
are also available online. To register for one or more topics, use the
online
tutorials enrollment form.
Mediator 8 online tutorials available
by C. Rodriguez, Information Technology Assistance Center
published Jan. 16, 2007
Are you wondering how to get started learning Mediator 8? This new
multimedia authoring tool is available for Windows computers through a
K-State campus site license. Check out MatchWare's
online
Mediator tutorials, which are available free to the public.
Computer information specialist job opening in iTAC
by E. Dover, Information Technology Assistance Center
published Jan. 16, 2007
The Information Technology Assistance Center is seeking to fill a
Computer Information Specialist position in its Instructional Technology
and Client Services unit. This full-time, unclassified position is an
evening position and will be involved with the ongoing
support and maintenance of the technology classrooms, K-State InfoCommons, and
university computing labs on campus. For more information, read the
job posting.
First-round review of resumes will begin Feb. 5.
Security tip: New security guidelines for mobile devices
by H. Townsend. interim IT security officer
published Jan. 16, 2007
SIRT has published
new guidelines for securing laptop computers and other mobile devices,
with special attention given to protecting sensitive information like Social Security numbers, credit card numbers,
student records, and personnel records. With up to 750,000 laptop computers stolen in the United States each year
(the FBI estimates only 3 percent are recovered), it is critically important to take appropriate precautions
to protect these devices and the information stored on them.
K-State is not immune. In the last year, four laptops were stolen out of a lab,
a faculty member had a laptop stolen while on sabbatical in Europe, and several laptops have been stolen from students on campus.
If you still need motivation to take the threat seriously, visit the
chronology of data breaches maintained by the
Privacy Rights Clearinghouse. Note how many of the more than 100 million records containing sensitive personal information
involved in security breaches in the last two years were due to lost or stolen laptop computers.
A key recommendation in K-State's guidelines is to avoid storing sensitive information on mobile devices in the first place.
The fact that they are portable puts them at a higher risk for loss or theft, so keeping sensitive data off is prudent. If you
absolutely must have sensitive information on a portable device, then it should be encrypted both when it is stored on the device
and when it is being transmitted.
These recommendations provide interim guidance while K-State's Information Resource Management Council (IRMC) develops a
more comprehensive data classification and security policy and standards.
The new guidelines also remind K-Staters to notify the IT security officer and your local system administrator immediately
if a computer with sensitive information is lost, stolen, compromised, or suspected of being compromised.
State law in Kansas (PDF)
now requires prompt investigation and notification if there is reasonable probability that personal-identity information
was stolen -- something we would do anyway since this information is entrusted to our care.
IT by the numbers: TEVAL use in fall 2006
by R. Gould, Information Technology Assistance Center
published Jan. 16, 2007
213 = number of K-State faculty using the online TEVAL system in fall
2006.
|