Cybersecurity plans

CISL manages a diverse computational and data storage environment encompassing high-end computers, mass storage subsystems, data archives, visualization, e-mail, domain name service, authentication, web servers, and networks. Not only are these systems valuable monetarily, they comprise vital scientific research tools and business continuation systems used by the UCAR organization and university communities. CISL is committed to maintaining a security posture that represents an enterprise to the community, allowing for the organization's scientific mission to be pursued in an unobstructed manner.

To fulfill the near-term security objectives of CISL, the following plans are in place for FY2006:

Participate in a leadership role in the NSF-sponsored Cybersecurity Summit 2005
Continue to work with the UCAR Computer Security Advisory Committee (CSAC), assisting to implement effective policies in CISL and across UCAR
Complete implementation of one-time password (OTP) technology across UCAR
Install, test, and deploy kerberos for the enterprise
Install aggressive network and host monitoring tools; augment current intrusion detection system (IDS) software
Place increased importance on computer and network security when acquiring and configuring new equipment (computers, storage, network routers, etc.)
Engage in collaborative efforts with peer centers to share cybersecurity information, best practices, and incident notification

CISL intends to work with CSAC to produce a comprehensive and clearly defined security plan for the organization in FY2007. Standards compliance auditing will be implemented. Plans for FY2007 also include upgrades for several of the existing security hosts.

FY2005 Annual Report