Electronic Data Security
STANDARDS
APPROVED OPERATING SYSTEMS
For purposes of the Electronic Data Security policy and related procedures, an approved operating system (OS) is any OS for which security updates are actively released.
Approved Windows operating systems currently include Windows 2000, Windows 2003, Windows XP, Windows Vista, Windows 2008, and Windows 7. All older Windows editions, including Windows 98, Windows Me, Windows 95, and Windows NT, are no longer actively supported by Microsoft and are not approved for use with sensitive electronic data.
Approved Apple operating systems currently include Mac OS X v10.6 ("Snow Leopard") and Mac OS X v10.5 ("Leopard"). All older MAC OS editions are no longer actively supported by Apple and are not approved for use with sensitive electronic data.
Literally dozens of Unix/Linux variants exist. Maintaining a definitive list of all currently supported versions is therefore intractable. Unix/Linux users can readily monitor the status of their particular distribution however, and are responsible for running a currently supported version for which security patches are released and applied.
APPROVED ANTI-VIRUS SOFTWARE
For the St. John's campus: Currently approved anti-virus software is McAfee VirusScan for Windows, version 8.7i with e-Policy Orchestrator.
For the Marine Institute: Currently approved anti-virus software is Symantec EndPoint Protection version 11.05.
For Grenfell Campus: Currently approved anti-virus software is Microsoft Forefront.
For all campuses: Mac and Unix/Linux anti-virus software is recommended but currently not required. Clients wishing to explore anti-malware options for these platforms should contact their IT Service Desk.
APPROVED DISK ENCRYPTION SOFTWARE
For all campuses: McAfee Endpoint Encryption is the approved full disk encryption solution for Windows laptops.
McAfee Endpoint Encryption is currently not available for MacBooks, but is expected to be released Q1 2010. MacBook users should avail of Mac OS X's FileVault encryption feature until that time.
McAfee Endpoint Encryption is currently not available for Unix/Linux systems. Unix/Linux laptop users should use TrueCrypt or an encrypting file system to protect sensitive electronic data.
APPROVED FILE ENCRYPTION SOFTWARE
For all campuses: Currently approved encryption methods include:
Microsoft Office Documents
Microsoft Office documents can optionally be encrypted on saving. For details, please refer to Microsoft Office Document Encryption.
WinZip
As per Microsoft Office, WinZip optionally allows for encryption on creating an archive of one or more files. For details, please refer to Encrypting Files with WinZip.
BLACKBERRY PASSWORDS
University Blackberries shall be configured to have:
• six character minimum passwords
• fifteen minute maximum idle times
• factory reset of the device after ten failed login attempts
Clients seeking additional information should consult Memorial's Blackberry Password FAQ or contact their IT Service Desk.
