Harvard University Information Security | HARVARD.EDU

Manage All Servers

Configure vulnerability scanning software appropriately

Configure Tenable to scan servers every 30 days.

Install vulnerability scanning software appropriately

Install Tenable on all servers

Handle Security Logs Appropriately

Logs should be stored within a central log server or log storage solution provided by the IaaS/SaaS provider....

Encrypt data on AWS and Azure

Follow the attached PDF to encrypt data on AWS and Azure. Read more about Encrypt data on AWS and Azure

Manage Access

Refer to the university Harvard Sponsored Role Portal...

Encryption should be implemented where feasible

Encryption should be implemented where technically and economically feasible.

Remote login must only permit the use of encrypted communications

Remote login to all servers must only permit the use of encrypted communications such as ssh. Windows servers must enforce a minimum of 128-bit encryption for Terminal Services and Remote Desktop communication. All servers running SSH must use a minimum of protocol version 2. Use 2-factor VPN to connect through the firewall first.