Announcements Archive
Announcements Archive
New Policy Re Personally-Owned Computers
Jun 18 2009Jan J. van der Aa
Assist VPHA/CIO
After extensive vetting and review, HSC leadership has approved the TS0012 Computer Security Policy and TS0012.04 Personally or Affiliate Owned Computer Security Standard. The policy and standard address the security of personally-owned computers used to access services on the HSC network, including servers providing services such as email. Specifically, if you use your personally-owned computer to access HSC networks and servers, the personally-owned computer needs to be configured with security controls including strong passwords, the use of separate and limited user accounts for all who use your computer, up-to-date anti-virus software, computer firewall, automatic operating system updates, the absence of peer-to-peer software, computer inactivity timeout, and other controls. These required security controls not only protect HSC information and networked servers but also provide protections for home computers and personal information stored on them.
Effective July 1, 2009, owners of personally-owned computers are responsible for ensuring that the required security controls are implemented on their personally-owned computers before using them to access the HSC network or servers. HSC managers of servers and networks in the HSC are responsible for only enabling access to personally-owned computers to which the owner has applied the appropriate security controls. The "computer security checklist and attestation form" may be used to assist personally-owned computer users and HSC network and server managers to facilitate secure access.
In general, UF HSC colleges and institutes do not provide technical support for faculty, staff and student personally-owned computers. Therefore, personally-owned computer users will need to implement the security controls on their own, or seek professional technical support.
Personally-owned computer users who are unable to implement the required security controls should no longer use their personally-owned computer to access the HSC network and servers.
The policy and standard, the checklist and attestation form and the self-help documentation can all be found on this web page.
If you have any questions concerning this policy and standard, please contact your Unit Information Security Manager or Unit Information Security Administrator.
Jan J. van der Aa, Ph.D.Assistant Vice President for Information Services/CIO.
Director IT-Center.
Office of the Senior Vice President for Health Affairs.
University of Florida.
vanderaa@ufl.edu
(352) 273-5000
Colleen Ebel
Chief, Information Security
Office of the Senior Vice President for Health Affairs.
cebel@ufl.edu
(352) 273-5014
Back to Announcements Archive
