https://padlet.com/amyduff/2jmsbk5gfrni5112 This session is about ensuring everyone is aligned with the scope items included as part of the upcoming Cyber Security Improvement Programme (CSIP) - 'AKA the big list' and to start to map out and discuss how the work should be chunked up, the priorities and estimate the high level timelines needed for each work package. Estimated timelines to be captured as: 0-3 months 3-6 months 6-12 months 12+ months. Next steps will be to look at the resource requirements and a more detailed work package breakdown. en-us 2021-09-02 09:45:36 UTC 2025-12-19 18:30:49 UTC hello@padlet.com amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712398376 Review policies, processes, standards and ensure they reflect the risks and are appropriate to protect the University but enable the delivery of service and strategy ​]]> 2021-09-02 09:49:27 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712398376 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712399183 Review the guidance, training, awareness and support given to the various user communities (staff, student etc) and the cultural change of the change in security positioning​]]> 2021-09-02 09:50:12 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712399183 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712399738 Review governance to ensure security policies, process and standards are compliant and to support audit and investigation activities and ensure training and awareness is effective.  ]]> 2021-09-02 09:50:46 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712399738 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712400235 Implement technical controls and improvements to strengthen the security defences and monitoring at the University to protect the Digital environment and to safeguard its Information. ​]]> 2021-09-02 09:51:07 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712400235 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712426639 2021-09-02 10:17:03 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712426639 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712426830 2021-09-02 10:17:09 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712426830 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712427045 2021-09-02 10:17:16 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712427045 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428078 2021-09-02 10:18:18 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428078 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428265 2021-09-02 10:18:25 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428265 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428363 2021-09-02 10:18:32 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428363 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428477 2021-09-02 10:18:39 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428477 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428565 2021-09-02 10:18:44 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428565 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428686 2021-09-02 10:18:49 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428686 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428804 2021-09-02 10:18:56 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428804 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428937 2021-09-02 10:19:04 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712428937 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712429043 2021-09-02 10:19:09 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1712429043 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715212047 Review/Create Network Connection Policy - overarching]]> 2021-09-03 13:20:12 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715212047 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715213907 Review/Create Patching Policy - overarching]]> 2021-09-03 13:21:00 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715213907 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715214787 Alumni 'email for life' Policy]]> 2021-09-03 13:21:21 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715214787 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715215589 Server 'admin account' Policy

Administrator rights policy]]> 2021-09-03 13:21:44 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715215589 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715216949 Procurement security standards]]> 2021-09-03 13:22:26 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715216949 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715217868 Records management – where to store data and backing up]]> 2021-09-03 13:22:53 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715217868 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715218300 Identity management policy – Staff, Student, PGR]]> 2021-09-03 13:23:06 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715218300 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715218657 Data movement policy]]> 2021-09-03 13:23:16 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715218657 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715218908 Backup and DR policy]]> 2021-09-03 13:23:24 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715218908 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715219324 Mobile device storage policy – Memory sticks]]> 2021-09-03 13:23:31 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715219324 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715219570 UoP Guest wifi access policy – what can you connect to]]> 2021-09-03 13:23:39 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715219570 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715220307 Password Policy]]> 2021-09-03 13:24:01 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715220307 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715220693 AUP policy]]> 2021-09-03 13:24:13 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715220693 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715220933 Web filtering policy]]> 2021-09-03 13:24:20 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715220933 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715221169 Web site policy – security and change management]]> 2021-09-03 13:24:27 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715221169 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715221321 Apple device policy]]> 2021-09-03 13:24:31 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715221321 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715241571 Mobile device policy (phones and BYOD)]]> 2021-09-03 13:34:03 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715241571 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715242017 Research Kit Policy]]> 2021-09-03 13:34:13 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1715242017 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719052078 Mange the cultural change in the new approach to security – communications and training]]> 2021-09-06 09:58:06 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719052078 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719053179 Review current training package - Consider mandating]]> 2021-09-06 09:58:54 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719053179 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719053476 Increase comms and awareness]]> 2021-09-06 09:59:07 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719053476 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719053733 Implement new packages if required - e.g. Phishing campaigns.  ]]> 2021-09-06 09:59:14 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719053733 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055160 Set up Cyber Security team]]> 2021-09-06 10:00:18 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055160 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055351 Cyber Security third party audit]]> 2021-09-06 10:00:26 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055351 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055536 Account management process – Leavers, starters(link to HRF prog?)]]> 2021-09-06 10:00:33 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055536 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055707 Business continuity and Recovery planning]]> 2021-09-06 10:00:40 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055707 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055858 Disaster Recovery for Estates systems]]> 2021-09-06 10:00:47 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055858 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055997 Business case for longer term SOC]]> 2021-09-06 10:00:53 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719055997 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719059463 Implement CMDB (Config Management Database)
Ensure system configurations recorded in CMDB

]]> 2021-09-06 10:02:49 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719059463 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719059829 Review existing systems compliance to security policies]]> 2021-09-06 10:03:05 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719059829 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719059987 Validate Third Party VPN access]]> 2021-09-06 10:03:12 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719059987 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719060138 Audit security of websites]]> 2021-09-06 10:03:19 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719060138 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719060318 Confirm priority order for service restoration]]> 2021-09-06 10:03:27 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719060318 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719060502 Audit storage of data on PCs]]> 2021-09-06 10:03:35 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719060502 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719060564 Audit data stored on network stores]]> 2021-09-06 10:03:38 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719060564 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719061099 Audit Disaster Recovery setup for Public website]]> 2021-09-06 10:04:03 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719061099 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062071 Implement Zero Trust framework and Strong authentication – Biometrics]]> 2021-09-06 10:04:49 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062071 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062342 Implement Access Control and Privilege Management]]> 2021-09-06 10:04:59 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062342 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062504 Network activity threat monitoring]]> 2021-09-06 10:05:07 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062504 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062678 Review and update security hardening on all platforms (Microsoft, Linux, Apple, Blackbox and others)]]> 2021-09-06 10:05:16 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062678 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062919 Alternative for LAR]]> 2021-09-06 10:05:24 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719062919 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063081 Update to latest Single Sign On standards (SAML)]]> 2021-09-06 10:05:31 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063081 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063230 Review Legacy Estates systems]]> 2021-09-06 10:05:38 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063230 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063381 Implement Federated External Access (Partner users)]]> 2021-09-06 10:05:46 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063381 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063521 Complete Quarantine Client Device review]]> 2021-09-06 10:05:53 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063521 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063720 Remove (Federate) local accounts on systems e.g. StarRez]]> 2021-09-06 10:06:02 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063720 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063909 Implement regular penetration test process]]> 2021-09-06 10:06:10 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719063909 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719064068 Implement management system for all end point devices (Windows, Linux, Apple, Android, Others)]]> 2021-09-06 10:06:18 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719064068 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719064131 Review all legacy network connected devices]]> 2021-09-06 10:06:21 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719064131 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719065295 VPN, Network and Storage segregation]]> 2021-09-06 10:07:07 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719065295 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719065409 Implement network posturing checks]]> 2021-09-06 10:07:13 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719065409 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719065485 DDOS protection]]> 2021-09-06 10:07:16 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719065485 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719065879 New secure Service Status page]]> 2021-09-06 10:07:34 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719065879 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719387347 Staff email and storage policy]]> 2021-09-06 13:43:38 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719387347 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719455320 Data management policy overarching]]> 2021-09-06 14:16:50 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719455320 amyduff https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719550522 clarifying and seek consultation/approval on how to confirm identify of people (service desk)]]> 2021-09-06 15:05:05 UTC https://padlet.com/amyduff/2jmsbk5gfrni5112/wish/1719550522