Services

The OIT/ESS Division of Information Protection and Security is a service oriented organization providing assistance in a number of functions.

Authentication/Token Cards — last modified 2007-07-27 11:28

Authentication services (including Safeword, SecurID, and Kerberos) provide strong authentication to validate a user's identity. All users of the service are individually registered with the system and the resulting security is much stronger than traditional static-password technologies. This technology is used to secure various systems and services run by RU Enterprise Systems and Services Division of Information Protection and Security and may be utilized by groups within Rutgers for their own services if desired. The service is funded by fees charged to users which cover the costs of hardware, licensing, and support.

Data at Rest (DAR) Encryption — last modified 2008-02-04 06:30

Encryption software protects data-at-rest (DAR). Laptops and other mobile devices with critical data may be lost or stolen, compromising the data. In the event of a data breach involving Social Security Numbers, credit cards and the like -- collectively termed Non-Public Personal Information (NPPI) -- the New Jersey Identity Theft Prevention Act requires Rutgers to send notifications warning of the possibility of identity theft. An incident may also open the university to adverse publicity. However, if the lost data is encrypted, the law excuses the institution from the notification obligation. The overall goal of data-at-rest encryption is the mitigation of risks associated with data breaches.

Education — last modified 2007-07-27 11:28

Updating skills and learning about technology is important not only to technical staff by to administrative staff as well. The Division of Information Protection and Security provides tools, tutorials, occasional speakers, and promotes security awareness throughout the unversity.

Tools — last modified 2007-07-27 11:28

The ESS Division of Information Protection and Security provides a number of services to assist university units in maintaining appropriate levels of IT security.