Re: policy question?

[randy marchany <marchany () VT EDU>]

We enforce via policy and technology. The interesting issue is determining
who is the "responsible" person for the asset. We do security reviews of
departmental assets, we scan systems on our networks, we provide a CD that
configures your systems to the minimum standards (http://www.vtnet.vt.edu/).

-r.

On Fri, Oct 29, 2010 at 11:34 AM, SCHALIP, MICHAEL <mschalip () cnm edu> wrote:

> Do you enforce the “you must be this tall…” strictly through policy, or
> through technology?....NAC?  Something else?
>
>
>
> *From:* The EDUCAUSE Security Constituent Group Listserv [mailto:
> SECURITY () LISTSERV EDUCAUSE EDU] *On Behalf Of *randy marchany
> *Sent:* Friday, October 29, 2010 8:31 AM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* Re: [SECURITY] policy question?
>
>
>
> We have a "you must be this tall to play on our network" policy. It sets
> the minimum security standards for ANY IT technology that connects to our
> network. The policy is at http://www.policies.vt.edu/7010.pdf.
>
> Randy Marchany
> VA Tech IT Security Office & Lab
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.