A security newsletter I subscribe to recently referred to a fact sheet titled "Best Practices for Securing Your Home Network" that goes beyond home networks and wireless to cover email and traveling with mobile devices and more. It is one of the best overviews I have read for some time. It can be found at:
http://www.nsa.gov/ia/_files/factsheets/Best_Practices_Datasheets.pdf
Tuesday, 23 August 2011
So, you want a special piece of equipment eh?
ITS is working to develop an IT Famework, essentially a set of policies to direct our operations. The advantage of having policy is that, if crafted well, they provide clear direction and a fair and equitable means to guide decisions; they set the rules. Policy is ever changing; legislative requirements, processes, and standards pass quickly and we need to adapt. We also may find that policy is not working well for its intended purpose, and need to change it for that reason.
For the last year or so we have used a process in the ITAPP Policy to vet special requests for computer equipment, requests that are outside of the usual allocation of equipment as stipulated in the college’s Computer Allocation Policy. This process is proving to be cumbersome and ineffective. The ITAPP policy is essentially a security, access, and bandwidth management policy that is not well suited to deciding on day to day, operational uses of technology. With this experience in mind, and with the direction of the ITAPP committee, we will bring forth to President’s Council changes to the ITAPP and the Computer Allocation policies to have special requests for computer equipment brought through the budget process. The budget process is well established, and is used to decide on practically all other significant equipment requests at MHC.
Relevant sections of the revised Computer Allocation Policy have been drafted (not yet authorized) as follows:
7) MHC employees will be provided with access to a computer based on the software requirement, teaching environment, and industry standard. In practice, this means that all MHC employees will be provided a MS Windows computer except in the following circumstances and assuming approval of the exception by the college through supervisory and budget processes:
For the last year or so we have used a process in the ITAPP Policy to vet special requests for computer equipment, requests that are outside of the usual allocation of equipment as stipulated in the college’s Computer Allocation Policy. This process is proving to be cumbersome and ineffective. The ITAPP policy is essentially a security, access, and bandwidth management policy that is not well suited to deciding on day to day, operational uses of technology. With this experience in mind, and with the direction of the ITAPP committee, we will bring forth to President’s Council changes to the ITAPP and the Computer Allocation policies to have special requests for computer equipment brought through the budget process. The budget process is well established, and is used to decide on practically all other significant equipment requests at MHC.
Relevant sections of the revised Computer Allocation Policy have been drafted (not yet authorized) as follows:
7) MHC employees will be provided with access to a computer based on the software requirement, teaching environment, and industry standard. In practice, this means that all MHC employees will be provided a MS Windows computer except in the following circumstances and assuming approval of the exception by the college through supervisory and budget processes:
- If software required for the job role can only be sourced for another computing environment, access to that computing environment may be provided.
- Instructional staff instructing MHC students in a non MS Windows computer lab will be provided with a computer compatible with, or the same as, the lab computers, if it is their preference. - Instructional staff instructing MHC students in the use of a software product that is only available on a non MS Windows computing environment will be provided with a computer that runs the software product, if it is their preference.
- Instructional staff who are teaching in a field of study or industry in which the use of a particular computing environment is predominant or a standard will be provided with a computer compatible with, or the same as, that particular computing environment, if it is their preference.
- Instructional staff who are teaching in a field of study or industry in which the use of a particular computing environment is predominant or a standard will be provided with a computer compatible with, or the same as, that particular computing environment, if it is their preference.
- Information technology support staff and educational technology support staff will be provided with appropriate access to whatever type of computer systems are needed for their job role.
Exceptions
Requests for computer systems and configurations that fall outside of the allowance of this policy must be based on the job related need of the employee(s) and take into consideration implications for support costs and support capability at the college, as well as purchasing cost.Process for Authorizing of Exceptions
The allocation of computer systems and configurations beyond the parameters of this policy will be determined through the MHC budget process, and requires:· the approval of the Budget Centre Manager and,
· the approval of the responsible Vice President and,
· and approval of the Budget Committee
Requests detailing the type of computer equipment requested, the cost, and the justification for the purchase are brought forth in the annual budget process by the budget centre managers.
Monday, 25 July 2011
Using the MHC Network to Store Your Work Material
Did you know that all MHC employees have a personal storage space on the MHC network?
For most MHC employees the use of your own storage area on the MHC network could replace the need to store important files to the hard disk on your desktop computer. This networked storage area, labelled the 'P' drive (P for personal) is secure space, backed-up regularly, and is accessible from anywhere you have an Internet connection through MHC's new web based VPN service.
For most users who are not storing large graphics or videos files, this location could be used to store all of your electronic work material, and is easily accessible from any computer with an Internet connection.
See the link below for information on how to use your network storage location, and contact MHC's IT Support Centre anytime for more information.
http://mhcit.blogspot.com/p/faq-and-instructions.html
For most MHC employees the use of your own storage area on the MHC network could replace the need to store important files to the hard disk on your desktop computer. This networked storage area, labelled the 'P' drive (P for personal) is secure space, backed-up regularly, and is accessible from anywhere you have an Internet connection through MHC's new web based VPN service.
For most users who are not storing large graphics or videos files, this location could be used to store all of your electronic work material, and is easily accessible from any computer with an Internet connection.
See the link below for information on how to use your network storage location, and contact MHC's IT Support Centre anytime for more information.
http://mhcit.blogspot.com/p/faq-and-instructions.html
Tuesday, 7 June 2011
Spring and Summer - Preparing for Another Academic Year
June and July are busy months in ITS. With fewer students on campus in spring and summer, ITS can get into labs and other areas of campus more freely in order to work and deploy equipment.
This year, as all years, we will roll out new computers to labs, and re-image all the lab machines for the software mix to be used in the next year. There are also a number of infrastructure projects, relating to networking, server equipment, and upgrades, that are best done at this time of year. We roll out new staff and faculty machines throughout the year.
Some years ago we initiated a 4 year rotation cycle for all computers on campus. We try to keep all computers on campus under a four year warranty, once they are beyond that age we replace them with new computers. With about 1200 machines on campus, this means purchasing and preparing about 300 machines each year (although this number varies considerably depending on the particular labs to be replaced). In the upcoming 11-12 academic year computers purchased and deployed in the 07-08 academic year will be replaced. So, if your computer is of that vintage, and you do not hear from ITS prior to Christmas 2012 about a replacement, contact the Support Centre and we will check to ensure that we replace your machine on this schedule.
Budgeting for computer replacements is done centrally. To get an estimate of the cost to replace the computers and the mix of software annually we assign an average cost per individual computer replacement multiplied by 300. We have a computer allocation policy that indicates how we handle requests for computer equipment that fall outside of this replacement cycle. Employees working internal to the college may click below to view this policy on Share Point.
Computer Allocation Policy
This year, as all years, we will roll out new computers to labs, and re-image all the lab machines for the software mix to be used in the next year. There are also a number of infrastructure projects, relating to networking, server equipment, and upgrades, that are best done at this time of year. We roll out new staff and faculty machines throughout the year.
Some years ago we initiated a 4 year rotation cycle for all computers on campus. We try to keep all computers on campus under a four year warranty, once they are beyond that age we replace them with new computers. With about 1200 machines on campus, this means purchasing and preparing about 300 machines each year (although this number varies considerably depending on the particular labs to be replaced). In the upcoming 11-12 academic year computers purchased and deployed in the 07-08 academic year will be replaced. So, if your computer is of that vintage, and you do not hear from ITS prior to Christmas 2012 about a replacement, contact the Support Centre and we will check to ensure that we replace your machine on this schedule.
Budgeting for computer replacements is done centrally. To get an estimate of the cost to replace the computers and the mix of software annually we assign an average cost per individual computer replacement multiplied by 300. We have a computer allocation policy that indicates how we handle requests for computer equipment that fall outside of this replacement cycle. Employees working internal to the college may click below to view this policy on Share Point.
Computer Allocation Policy
Thursday, 26 May 2011
New Draft - MHC Technology Plan
The MHC Technology Plan was brought to Presidents Council on May 24. The council will provide feedback and further scrutiny. If all remains on schedule, the plan should be authorized in Early Autumn 2011. We are already working on some of the goals in the plan, with the assumption that at this point only details will change, and the two core focus areas of the plan will remain.
A Culture Shift: IT for Better Teaching and Increased Efficiency
Much of the plan builds around two core focus areas:
1. Integrated Planning
2. Specialized Training and Support Services
A Culture Shift: IT for Better Teaching and Increased Efficiency
Much of the plan builds around two core focus areas:
1. Integrated Planning
2. Specialized Training and Support Services
The need to plan and provide IT related services in a more integrated manner across the College is an underlying theme, directly stated and implied in a number of the goals.
Improving Teaching and Learning
• Encouraging opportunities and providing support for faculty to use IT tools.
• A shift in the culture of information technology use towards the use of IT in pedagogical practice directed strongly by faculty towards the service of learners.
The latest draft of the plan can be found here.
Monday, 25 April 2011
MHC Technology Plan 2011-2014
MHC is finalizing a new Technology Plan that will provide strategy and IT related investment direction to the college into 2014. Find draft sections of the plan linked below.
Currently, the drafts are being taken to Deans Council, VPs and their management teams, and will go to President's Council in May. Feedback from these groups will result in a final plan near the start of the Fall 2011 academic term.
All feedback from MHC employess and students is welcome. Provide feedback to Chuck Payne, Director, Information Technology, payne@mhc.ab.ca or (403) 529-3870
Technology Plan - Draft
Currently, the drafts are being taken to Deans Council, VPs and their management teams, and will go to President's Council in May. Feedback from these groups will result in a final plan near the start of the Fall 2011 academic term.
All feedback from MHC employess and students is welcome. Provide feedback to Chuck Payne, Director, Information Technology, payne@mhc.ab.ca or (403) 529-3870
Technology Plan - Draft
Tuesday, 22 March 2011
IT Policy Primer
IT Acceptable Use, Information Technology Access and Protection (ITAPP), and Allocation of Microcomputers Policies
Policies are seldom a subject that will attract an audience ;-) but as polices do affect the way IT services are handled at MHC, and will thereby affect your work, I think that drawing attention to three key polices that guide the work of ITS may be useful.
All college policies are housed on our internal SharePoint server. If you have any questions about an IT related policy at MHC, please contact me. I am always happy to discuss how policy may apply to you in your work for the college.
Regards,
Chuck Payne
Director, Information Technology
Director, Information Technology
_ _ _ _ _ _
The IT Acceptable Use Policy (General Administration 5.19) provides broad direction on the provisioning and use of IT related equipment and services at MHC.
This policy is built around a few simple principles, and includes a section of rights and responsibilities for college employees:
Principles
The following principles are the basis of managing the college’s computer resources in an ethical and effective manner.
1. The college will maintain an atmosphere that balances respect for individual computer usage and college computing needs.
2. The college will maintain an environment whereby the college’s computer
resources are considered to be reliable, secure and efficient.
3. All college computer resources shall be used primarily for work-related activities (i.e. educational, academic research, and administration purposes) and as such using the college’s computer resources and access to the Internet for incidental personal purposes shall be minimized.
2. The college will maintain an environment whereby the college’s computer
resources are considered to be reliable, secure and efficient.
3. All college computer resources shall be used primarily for work-related activities (i.e. educational, academic research, and administration purposes) and as such using the college’s computer resources and access to the Internet for incidental personal purposes shall be minimized.
MHC employees have the right:
1) To be provided with an appropriate level of computer technology (software and hardware) to allow them to perform their jobs.
2) To have the computer technology maintained and repaired in a timely manner.
3) To load work-related software on their MHC provided computer system, as long as the software is proven to be legally licensed, does not pose a reliability or security risk, and is related to their work at MHC.
2) To have the computer technology maintained and repaired in a timely manner.
3) To load work-related software on their MHC provided computer system, as long as the software is proven to be legally licensed, does not pose a reliability or security risk, and is related to their work at MHC.
MHC has the right:
1) To deny use of MHC computer equipment or related services based on the contents of this policy, or if the college executive regards the use to be inappropriate or to pose risk to the college.
2) To monitor use of MHC computer equipment and related infrastructure based on Guideline 4,
2) To monitor use of MHC computer equipment and related infrastructure based on Guideline 4,
And Guideline 4 is “Any data stored or transmitted using MHC technology may be monitored by the college. Such data will not be accessed by the college without cause and due process.”
_ _ _ _ _ _ _ _ _ _
The new Information Technology Access and Protection Policy (General Administration 5.39) deals largely with how we allocate the use of shared IT resources, such as college bandwidth and network resources.
“Employee and student access to information through computer systems and networks is required for the college to perform its role. This policy provides guidance in balancing the need for access with the need for security and the cost involved in providing access.”
This policy was written largely in response to questions and concerns brought to GAC in 2009, regarding access to Internet resources. To that end the policy provides guidance on the allocation of bandwidth and on the issue of URL content filtering:
“URL filtering is applied only for security reasons in order to reduce access to sites that have a high security risk. URL filtering based exclusively on content (censorship) will not occur except within the boundaries of policy 5.13 “Internet Policy Compliance” regarding the access of discriminatory or sexually obscene materials.
Access to college filtered Internet content will be opened upon requests made through the IT Support Centre as bandwidth and security management systems in place at the college will allow, unless the content violates policy 5.13, is an indentified source of malware, or if access violates an indentified law or regulation.”
The policy also provides a process for employees, who require exceptional or unusual access to technology, to bring forth requests and have them vetted by the college. An ITAPP committee was established to create this policy, and essentially the same broadly representative group comprises the ongoing ITAPP committee, who is charged with reviewing requests submitted by employees or groups. The ITAPP Committee can assess requests relating to:
- Filtered content;
All requests related to allowing filtered Internet content for individual or wider use that have been rejected after a request to the IT Support Centre;
- Significant and extraordinary IT infrastructure resource consumption
Including requests relating to large bandwidth or other extraordinary IT resource needs;
- Request for computer systems and equipment that fall under the Exceptions section of the “Computer Allocation” policy.
All requests related to allowing filtered Internet content for individual or wider use that have been rejected after a request to the IT Support Centre;
- Significant and extraordinary IT infrastructure resource consumption
Including requests relating to large bandwidth or other extraordinary IT resource needs;
- Request for computer systems and equipment that fall under the Exceptions section of the “Computer Allocation” policy.
_ _ _ _ _ _ _ _ _ _ _
The Allocation of Microcomputers Policy (General Administration 5.40) provides guidance as to what computer technology employees are provided with for their work at the college.
An important stipulation of this policy is that “all college owned computer systems will be purchased through the Information Technology Services Department; no other computer systems will be supported by the college.” So, please consult with ITS, and purchase through ITS, to ensure equipment is compatible with college infrastructure and can be supported by MHC.
This policy clearly indicates that the type of computer the college provides for faculty and staff will be determined based on a demonstrated instructional or business process need, stating “Software requirements and demonstrated need will determine the type of computer made available for use by college employees. Home use or personal computing preference cannot be a deciding factor in the allocation of a computer system; rather the environment needed to do work at the college will determine which system is used.”
Knowing that no policy can cover all circumstances, there is an “Exceptions” section in this policy, providing a process for employees to seek approval for computer systems and configurations that do not clearly fall with the detail of the policy.
Wednesday, 16 March 2011
MHC WEBVPN - SSL VPN Access to Internal College Resources for Employees
What is a SSL VPN? A 'Secure Socket Layer Virtual Private Network" is a technology that will allow college employees to go to a web page, log-in, and get access to a number of network resources and services that were until now only available when using a college computer on campus.
Based on the direction received from of an "Outside Access Working Group' in the Autumn of 2010, we are now in the process of implementing a system that will enable access for faculty and staff (based on their role and need) to the network resources and college services listed below. Phase 1 of this project is complete, phase 2 will be completed by July 1.
This is a new technology to us, and we know there will be some kinks to be worked out. As always, contact our Support Centre by phone (403-529-3899) or log a call via email CallCentre@mhc.ab.ca to report problems and get assistance in using this service.
Network Resources and Services Currently Available
For Faculty
· Course Outline Manager (COM) – currently not available through MAC platforms from outside of the College
· Employee Self Service (Payroll, SRB)
· Personal Storage Space on P: Drive
· Shared Departmental Folders
· Course Folders (X: Drive)
· SharePoint – Winky
For Staff
· Employee Self Service (Payroll, SRB)
· Personal Storage Space on P: Drive
· Personal Storage Space on P: Drive
· Shared Departmental Folders
· SharePoint – Winky
Network Resources and Services that will be Available In Phase 2
· Sitecore (College Advancement)
- This system manages MHC's web sites
- This system manages MHC's web sites
· SIS (Deans, Coordinators)
- access to CampusVue information for those who have access internally
- access to CampusVue information for those who have access internally
· SRB Application (HR)
- our HR and payroll systems
- our HR and payroll systems
· Talisma Application (College Advancement)
- our application for working with alumni and donors
- our application for working with alumni and donors
Monday, 14 March 2011
MHC Technology Plan - Information Technology Survey Feedback Sessions
We have had very good response to our recent survey of employees and students regarding IT services at MHC in preparation for the next MHC Technology Plan.
Please join us for a session where we will present survey results, and consider some themes that are evident in the results. This is also an opportunity for you to provide further feedback, and to have your questions answered.
Please join us for a session where we will present survey results, and consider some themes that are evident in the results. This is also an opportunity for you to provide further feedback, and to have your questions answered.
Two Sessions are scheduled:
- Thursday March 24 10:30 – 12:00 in the Crowfoot Room
- Friday March 25 12:00 – 1:30 in the Crowfoot Room
Agenda:
1) Why a new Technology Plan? (5 minutes)
2) Creating a new Plan (5 minutes)
3) Survey Results and Themes (30 minutes)
4) Feedback and Discussion
Monday, 7 March 2011
Upgrade of College Bandwidth - Improved Internet Access
In early March 2011 MHC's Internet bandwidth was upgraded from 100 to 200 MBPS. Considering that 4 years ago we had a total of a 10 MBPS connection, you get a sense of just how significantly the need to supply bandwidth has grown. This trend continues.
Increasing bandwidth means we can have more information (websites, email, video, services) passed to and from the Internet. It is analogous to adding more traffic lanes to a congested highway; more room for more people to get where they are going, faster.
This will allow us to further expand wireless services on campus, and one of the first areas to work on will be providing more 'leases' to wireless devices. You may have noticed or heard that often users of our wireless network (MHC- Public) cannot get a connection. Now that we have more bandwidth to support more users, we will work on expanding the number of wireless devices that can use the wireless network at any given time to better accommodate demand. This expansion of licenses will occur in spring, it is not a change we can apply immediately.
While I don't think this 200 MPBS service will allow us to meet all demand, it is a significant step in providing improved Internet access for employees and students.
Increasing bandwidth means we can have more information (websites, email, video, services) passed to and from the Internet. It is analogous to adding more traffic lanes to a congested highway; more room for more people to get where they are going, faster.
This will allow us to further expand wireless services on campus, and one of the first areas to work on will be providing more 'leases' to wireless devices. You may have noticed or heard that often users of our wireless network (MHC- Public) cannot get a connection. Now that we have more bandwidth to support more users, we will work on expanding the number of wireless devices that can use the wireless network at any given time to better accommodate demand. This expansion of licenses will occur in spring, it is not a change we can apply immediately.
While I don't think this 200 MPBS service will allow us to meet all demand, it is a significant step in providing improved Internet access for employees and students.
Subscribe to:
Posts (Atom)