Electronic Data Security
APPROVED OPERATING SYSTEMS
For purposes of the Electronic Data Security policy and related procedures, an approved operating system (OS) is any OS for which security updates are actively released.
Approved Windows desktop operating systems currently include Windows 7, Windows Vista, and Windows XP Professional Editions. Approved Windows server operating systems include Windows 2008 R2, Windows 2008, and Windows 2003. All older Windows operating systems are no longer actively supported by Microsoft and are not approved for use with sensitive electronic data.
Approved Apple operating systems currently include Mac OS X v10.8 ("Mountain Lion") and Mac OS X v10.7 ("Lion"). All older MAC OS editions are no longer actively supported by Apple and are not approved for use with sensitive electronic data.
Literally dozens of Unix/Linux variants exist. Maintaining a definitive list of all currently supported versions is therefore intractable. Unix/Linux users can readily monitor the status of their particular distribution however, and are responsible for running a currently supported version for which security patches are released and applied.
APPROVED ANTI-VIRUS SOFTWARE
For the St. John's campus: Currently approved anti-virus software is McAfee VirusScan for Windows, version 8.8 with e-Policy Orchestrator version 4.5.
For the Marine Institute: Currently approved anti-virus software is Symantec EndPoint Protection version 11.05.
For Grenfell Campus: Currently approved anti-virus software is Microsoft Forefront.
For all campuses: Mac and Unix/Linux anti-virus software is recommended but currently not required. The St John's campus McAfee site license covers the cost of McAfee VirusScan for Macs located on that campus. Clients wishing to explore anti-malware options for these platforms should contact their IT Service Desk.
APPROVED DISK ENCRYPTION SOFTWARE
For all campuses: McAfee Endpoint Encryption is the approved full disk encryption solution for Windows laptops.
McAfee Endpoint Encryption is currently not available for MacBooks. MacBook users should avail of Mac OS X's FileVault encryption feature until such time as it is available.
McAfee Endpoint Encryption is currently not available for Unix/Linux systems. Unix/Linux laptop users should use TrueCrypt or an encrypting file system to protect sensitive electronic data.
APPROVED FILE ENCRYPTION SOFTWARE
For all campuses: Currently approved encryption methods include:
Microsoft Office Documents
Microsoft Office documents can optionally be encrypted on saving. For details, please refer to Microsoft Office Document Encryption.
As per Microsoft Office, WinZip optionally allows for encryption on creating an archive of one or more files. For details, please refer to Encrypting Files with WinZip.
University Blackberries shall be configured to have:
• six character minimum passwords
• fifteen minute maximum idle times
• factory reset of the device after ten failed login attempts
Clients seeking additional information should consult Memorial's Blackberry Password FAQ or contact their IT Service Desk.