InfraSec 07.09.14 Minutes

Attending:

Phil Reiter, Mark Goedert, Allen Randall, Brian Ng, Kevin Shalla, Sandeep, Jason Maslanka, Craig Jackson, Jonathan Kupferer, Frank Cervone, Mike Kirda, Andre Pavkovic, Kevin Price, Eric Crenshaw, Ed Zawacki, Therese Molina, Bala Ramaraju, Himanshu Sharma, Sandeep Dath, Chris Barton, Heather O’Leary

  • ACCC Updates
    • Risk Management
      • Every report is at least in the drafting process
    • Microsoft 0365
      • Microsoft is working to resolve a snag with the Domain Name System (DNS)
      • Updates will be given once a migration timelines has been set
      • Budget information is needed before planning and coordinating with ACCC
    • Wireless
      • The project is closed
    • Storage
      • Network upgrades to support storage infrastructure are needed
      • Budget information is also needed
  • Outcomes
    • System Center Configuration Manager (SCCM)
      • Discussion of SCCM and how to make it more effective for the campus
      • Discussion of current use cases and related issues on campus
    • UISO
      • One last piece is being waited on before letters can be sent out
      • Discussion of issues with the phonebook
    • Human Resources (HR)
      • Heather Ross was able to change Computer Science titles to show the working title first in listings
      • ACCC has handed off all IT positions to HR for leveling
    • Rate and Funding
      • WTC is looking to finish in early September
      • Suggestions for members to talk to their administration teams and deans to prepare them for changes in IT charges in the future
    • Strategic Planning
      • A few members of the committee will be working to come up with a strategic planning session for the committee, targeted for August
    • Securely Storing Data
      • Discussions of storing high risk data—what does InfraSec want to advocate to the Council?
      • Discussion on current state of Box, the BAA, and related issues of risk
      • Consideration of what solutions are needed for different needs
  • New Business
    • Digital Signage
      • A new application is being considered that runs on a cloud-based portal
      • Everyone can manage their own content, all backend/storage is on the cloud
    • Email
      • Campaign is being worked on to reach students who are rerouting email
      • This will no longer be allowed, and a deadline to change will be set in place
    • Limiting NESSIE web access
      • A sophisticated attack at Urbana campus occurred with a replica of the authentication website asking for login and PIN information
      • Consideration of limiting NESSIE, if this is possible
      • Discussion if requiring a Virtual Private Network (VPN) would prevent the issue from occurring in the future
      • Discussion of related threats and possible solutions
    • After Action Report (AAR) Dashboard
      • Outage information from this year is being shared for evaluation: what systems are involved and why they are occurring
      • Discussion on perception of outages, users affected, how to display future data
    • ACCC Outage Windows
      • Discussion on update of last year’s outage windows for FY15
      • Discussion of academic schedules, how windows can be adjusted
      • There will be official communication with campus of which services will be going down during each outage window
      • Committee agreed to push August, December, and May dates forward one week
    • Mobile App
      • Available for trial use
      • Should be out in the next month or so
      • Bus tracker is functional, buses are not yet being tracked