David J. Ward will be leading a conversation with the vice chancellors on the topic of ecommerce. Summary notes from the network security breakout session at the April ITMC meeting were distributed. The issues were separated into matters of infrastructure and policy. The network security staff want the UW System to move to a pro-active posture instead of the current reactive mode. When new systems are purchased security needs to be considered up front, not just the functionality offered by new systems.
Security is a potential time bomb.
Several CIOs and technical staff met subsequently to discuss the next steps, which will be voiced to the CIOs in a forthcoming memo from Ed Meachen. The Council felt that security needs to be defined as securing the network from outside hackers so as to exclude, at least for the time being, issues of inappropriate access to data by internal users. The issue of inadequate staff resources for security, especially at the smaller campuses, was discussed. A possible remedy is for UW System or WiscNet to hire a security FTE that campuses could buy into as needed. The position could serve as a clearinghouse for information, function as a focal point during an attack, provide assistance in triaging an attack and assist the CIOs on security issues.