In Issue 167 of ITS News, we introduced the University-wide Server Compliance Project. Since this project was launched earlier this year, most of the system administrators in departments have already installed the specified agent software on their networked server for carrying out compliance assessment and detect security vulnerability on the servers.
The first set of quarterly reports have been generated and sent to about 50 departments in November 2014 for their information. The reports show i) overall compliance status of networked servers in departments; and ii) the list of non-compliance rules detected on these servers for remedial actions to be undertaken as deem necessary.
ITS is currently providing the agent software on popular operating systems including RedHat 6, CentOS 6, Windows 2008, AIX 6, HP-UX 11.31, RedHat 5, CentOS 5 and Windows 2012. Departments can find two suggested guidelines on how to adjust their servers for complying with the stipulated standards at the following links-
More information about this project can be found at http://www.its.hku.hk/services/infosec/servercompliance.
For those departments who have not yet installed the agent software on their network servers, please arrange the installation as soon as possible by contacting the undersigned for details of the arrangement.
Tel: 3917 2488