Technical Information

Pending Information Security Audit Update

Server Security

• ISEC System Roles and Responsibilities (PDF)
• Server security procedures and Guidelines
• System / Server Security Worksheet
• Server registration
• ISEC Vulnerability Management Standard (PDF) 
• Vulnerability Scanning Procedures and Guidelines (PDF)
• Certificate Management Plan 
• Wildcard Certificate Requests and Handling Procedures 
• Windows 2000 Server Default Services (PDF)
• Windows 2003 Server Default Services (PDF)

Network Security

• Static IP Request
• Border Firewall
• Management VPN Groups
• Vendor VPN Groups and LDAP Accounts

Desktop computer security

• Microsoft System Update Services
• Virus, worm information  

Best Practices to Protect Confidential Data

• Data Classification and Protection Standard (PDF)
• Server Security Procedures and Guidelines

External Links

• SysAdmin, Audit, Network, Security Institute (SANS)
• Carnegie Mellon Software Engineering Institute (CERT)

For more information or to report an incident or security breach...

User Services Help Desk (faculty, staff) 898-6000
University Police - Threats to Personal Safety, 898-5555 or 911
Information Security Office, 898- 6212 or 
ChicoInformationSecurity@csuchico.edu