Information itself is an extremely important asset to the University. Such decisions must include the risks and benefits for the entire University system, as opposed to a single part. Members of the University community need to be aware that some inconvenience is often the price for greatly reduced risk. Security awareness must increasingly be a part of everyday work for all members of the University community, not just the technical staff. Members of the University community need to be stewards of the University resources and information with which they are entrusted at all times.
Security is only as good as the weakest link.
It does little good to protect information, networks and systems in one place but not another. Therefore, everyone in the University community needs to exercise due diligence in securing and protecting University information, systems and networks. It is true when members of the community are accessing or using University information while physically at work, traveling, or working at home. By following good security practices we can help others in the University community benefit from the decreased risk. Technology should be reviewed for conformance to industry and University policies, practices and guidelines prior to deployment rather than after a problem or incident.