IT Services Best Practices Library

(01.21)

Articles (20)

Best Practice: Mandatory MUnet password change

Miami University computing network (MUnet) users must change their MUnet passwords from the default, and then every 180 days or five years thereafter, depending on the complexity of the password provided

Guide: Broadcast or bulk email messages

Miami University guideline provides protection to the Miami community and our electronic mail sources from unauthorized use of broadcast or bulk email messaging

Guide: Determine qualification of email (or any electronic correspondence) as a retainable record

Miami University guideline provides defining qualifications of email (or any electronic correspondence) as a retainable record

Guide: Document retention and destruction

Miami University guideline provides protection of documents and records containing confidential information from unauthorized access or disclosure

Guide: Tech resources for student organizations

Miami University student organizations may request email account(s), LISTSERV electronic email lists, or a Miami website alias through the Student Activities website or University IT Services

Policy: Business Intelligence Information Governance

Miami University Business Intelligence Information is readily accessible to members of the University community, while protecting confidential or sensitive information from accidental or unauthorized access

Policy: Payment Card Data Security

Miami University complies with Payment Card Industry Data Security Standards (PCI DSS) in order to receive payment via credit or debit cards. PCI DSS requires that certain elements of how we store, process, or transmit payment card data be codified in policy

Policy: Video Surveillance

Miami University uses video surveillance technology to enhance campus safety and security and to help maintain an environment conducive to quality education, individual privacy, diversity, and freedom of expression

Rationale: FERPA / Support response

The care and handling of student education records

Rationale: Peer-to-Peer File Sharing Ban

Miami University blocks P2P ports to eliminate network/Internet disruptions. Some reasons involve technology; others do not. EDUCAUSE provides a list of legal alternatives to P2P file sharing for music, movies, and TV shows at http://www.educause.edu/legalcontent

Standard: Active Directory Naming Objects

Miami University standard provides a consistent manner to identify the functional area responsible for a given object in the Active Directory, and to prevent collisions between objects in different organizational units

Standard: Mobile Device Security

Miami University standard decreases the likelihood of a security incident and loss of confidential information as a result of a mobile device being lost or stolen

Standard: Vulnerability Management

Miami University standard provides a consistent method by which to identify and mitigate vulnerabilities in Miami’s computing infrastructure in order to decrease the overall risk profile of the University