Implementation Plan

Data-at-Rest Encryption Considerations

Overview of Operational Processes

After the initial phases involving Acquisition and Contract and the development of supporting Policy and Procedure documents, the Data-at-Rest Encryption Software project will require ongoing support in the areas of system administration, service administration and license administration.  Staffing, training and documentation are the foundation upon which the administration of the project stands. 

Acquisition and Contract

·    Terms and conditions for acquisition of additional licenses

·    Annual maintenance costs

·    Hardware purchase

Policy and Procedure

·    Identification of pilot department

·    Identification of target devices and target departments

·    Planned rollout to additional departments

·    Conditions for third party recovery of encrypted data (who performs, who authorizes, under what circumstances) 

·    University policy support for the DAR initiative

·    Chain of custody for audit reports and logs

·    Software rollout

System administration

·    Disaster Recovery for Safeboot Management Center

·    Maintenance operations (patching, OS upgrades, application patching, application upgrades)

·    LDAP access

·    LDAP compatibility

·    Managing audit reports and logs

·    Examination of logs

·    Log archive

Service Administration

·    Password recovery for users

o   Safeboot webRecovery

o   Safeboot webHelpDesk

·    Administration of the Safeboot Management Center

·    Initial installation of Safeboot Management Center

·    Product rollout schedule

·    Data Recovery by Authorized Third Party

·    Log retrieval

License Administration

·    Tracking licenses and license transfers

·    Installation and initial distribution of client software

·    Client software upgrades

Staffing, Training and Documentation

·    Training for systems administration staff

·    Backup staffing

·    Documentation of processes and procedures 

·    End User documentation

·    Identification of authorized parties for third party data recovery

·    Fielding “level 2” Helpdesk questions

·    User training

·    Helpdesk staff training and documentation

·    User acceptance training to underscore the need for DAR encryption

 Contact:  safeboot-support@ess.rutgers.edu