Home page logo

educause logo Educause Security Discussion mailing list archives

Re: Pre Production System Accreditation
From: Dan Johnson <djj4 () UWM EDU>
Date: Thu, 6 Sep 2007 08:29:25 -0500


Well, I guess I misinterpreted the rule... All I really have at home for


g, if html does not come through)

That isn't enough??

(Ya, it's been a long day here as well!)

Dan Johnson

IS Comprehensive Services Senior

University of Wisconsin-Milwaukee

PO Box 469

Mellencamp Hall, Room B60

Milwaukee, WI  53201


"The stupid neither forgive nor forget; the naive forgive and forget; the
wise forgive but do not forget."

Thomas Szasz, The Second Sin (1973) "Personal Conduct"

-----Original Message-----
From: Valdis Kletnieks [mailto:Valdis.Kletnieks () VT EDU]
Sent: Wednesday, September 05, 2007 4:55 PM
Subject: Re: [SECURITY] Pre Production System Accreditation

On Wed, 05 Sep 2007 15:40:12 CDT, Dan Johnson said:

As to the level of security needed... um, does that mean I have to

take my home computer down a few levels from the top level DoD

specifications as outlined by NIST?  Man, all that work... ;o)

Personally, I'd be interested in knowing how you got a home computer *up* to
those levels in the first place (hint - you probably blew it big time on the
"physical security" rules - for instance, DOD 5220.22-M, section 5-307


      c.    GSA-approved security containers and approved vaults secured
with a

locking mechanism meeting Federal Specification FF-L-2740 do not require
supplemental protection when the CSA has determined that the GSA-approved
security container or approved vault is located in an area of the facility
with security-in-depth.

So you got your server in one of these:


and it's locked with one of these:


Yeah, that's a lot of work :)

(Sorry, it's been a long day.. ;)

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]