Security and Policy

Security and Policy protects the security of the data that crosses the networks and promotes the preservation of personal security and privacy for all people at Purdue University.

Identity and Access Management

• Coordinates identity assignment and role-based access across the University
• Provides consistent campus-wide means of managing and identifying constituents for granting access to University resources and ensuring individual privacy
• Manages Purdue career accounts, the Purdue University ID (PUID) program, the BoilerKey authentication token, guest-account services for campus visitors and other identification services

Information Security Policy and Compliance

• Facilitates the development of University information security policies, standards, guidelines and procedures, and consults on information security compliance activities under federal, state and local law
• Provides Purdue information security policies and other information security procedural documents, as well as information on security compliance activities, at the SecurePurdue Web site

Information Security Training and Outreach

• Offers training opportunities for Purdue University IT staff and other events, such as October presentations for National Cyber Security Awareness Month, directed toward all members of the Purdue community
• Maintains the SecurePurdue Web site – a clearinghouse for information and resources on computer security and issues for Purdue – and publishes the quarterly electronic SecurePurdue Newsletter

Security Services

• Provides a full suite of activities, including: vulnerability-scanning and hostmaster services; security assessments, reviews, penetration tests and consultations; incident response and remediation; evaluation and development; audit response coordination; second- and third-tier technical support; and support for central firewalls, security software and campus-wide antivirus software
• Provides Windows Server Update Services (for Windows patches) and, as part of incident response and remediation, services for central logging, as well as intrusion detection and prevention
• Resolves security related incidents and issues to support Purdue, including Spectrum monitoring and notifying, EPO, Firewall, Hostmaster, FileLocker and tool automation and collaboration