Educause Security Discussion mailing list archives

Re: Use of Personal Computers for Work


From: Jerry Tylutki <jtylutki () HAMILTON EDU>
Date: Wed, 26 Feb 2020 14:05:54 -0500

The few times I've tried to broker this conversation it ended up with
pushback for faculty members stating the need to perform institutional work
(research, grading) off-campus on any computer that is available (if they
left their managed laptop at work, or a number of other scenarios). There
is merit for proceeding with a policy requiring managed computers, with the
caveat that other controls and policies are in place beforehand (e.g. to
segment all byod staff/student/faculty devices). In the interim, we work
from our Data Class policy that specifies where particular data can be
accessed and how it can be accessed, requiring a VPN connection and a
minimum number of controls on unmanaged systems if they are allowed to be
used.

*-------*

*Jerry TylutkiInformation Security Officer*
*Hamilton College*

*(315) 859-4289 -- office*

******The contents of this email are CONFIDENTIAL. If you have received
this email by mistake, please notify the sender and delete the email and
its contents.******


On Wed, Feb 26, 2020 at 1:56 PM Menne, Michael S <michael.menne () mnsu edu>
wrote:

This is a fairly straight forward, yet difficult to implement, policy.
Staff are fairly easy. Adjunct instructors are more difficult as the
departments don’t want to spend money on laptops for adjunct instructors.



*From:* The EDUCAUSE Security Community Group Listserv <
SECURITY () LISTSERV EDUCAUSE EDU> *On Behalf Of *Ronald Loneker
*Sent:* Wednesday, February 26, 2020 12:53 PM
*To:* SECURITY () LISTSERV EDUCAUSE EDU
*Subject:* [SECURITY] Use of Personal Computers for Work



Hi Everyone -



I'm curious as to whether you have policies on your campuses requiring the
use of institutional-owned computers for work and how effectively you might
manage this faculty as well..



I've been saying to people it's bad security practice to be letting people
use their own laptops (especially on the staff side) but it might be time
to formalize something before people start thinking too much about going in
this direction.



Any thoughts you might have on this would be greatly appreciated as well
as any policies on this that you might be willing to share.



Thank you in advance!


Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229

e-mail:  rloneker () cse edu











**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community
<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C47c52f7ca58f492946fd08d7baed3980%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C0%7C637183400347382498&sdata=FX7yV9Bpi7cH0OcCvNfD5avwwZ9HpSkAt0DXUguxBtM%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire
community list. If you want to reply only to the person who sent the
message, copy and paste their email address and forward the email reply.
Additional participation and subscription information can be found at
https://www.educause.edu/community


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: