SharePoint Security Statement

SharePoint Security Statement

  1. Even though specific SharePoint sites or items may be password protected, SharePoint is an Internet-connected server which means that anyone in the world can generally contact the server and attempt to log in.
  2. Anyone, anywhere in the world, with the correct username and password can access information on the SharePoint server (i.e. data within SharePoint is a username and password away from anyone on the Internet).
  3. There are two kinds of data to consider:
    1. Restricted and Sensitive Data
      1. Generally, this type of data should not be placed in SharePoint.
    2. Intellectual Property that is not restricted, but should remain private
      1. This type of data may be placed in SharePoint at the discretion of project leaders.
  4. In general, if you are concerned about liability or legal ramifications, you should not place the data in SharePoint.  If you want to share restricted or sensitive data with a group, please consider using Purdue’s FileLocker sytem:  https://filelocker.purdue.edu.  While FileLocker is not as flexible as SharePoint, it is secure and encrypts data.

FileLocker – Share Files Securely

If you need to share files securely with others and you don’t want to risk placing your files on a consumer file sharing site, a good alternative @ Purdue is to use use FileLocker to distribute / share your files.

FileLocker is a free Purdue system that allows large files (up to 1 GB) to be securely uploaded and distributed. Files are encrypted within the system and you can protect files with a download password that non-Purdue people can use to fetch the file.

For example, instead of sending out CD’s in the mail to distribute a large file, you could upload it to FileLocker to enable others to securely download it.  If you need to share a group of files and folders, you could upload a ZIP file to FileLocker.

Here is a blurb from the FileLocker online help:

Learn how to share an uploaded file with anyone using a publicly available URL

1. After uploading a file, click on the file that you want to share and check the box next to “Public Share”.
2. Once the box is checked, you’ll be prompted to choose which email addresses should receive a link to the file you are sharing. You must also specify whether the share will expire after one use, or whether it can be downloaded repeatedly.
3. If the file may be downloaded repeatedly, you must specify a password that must be entered before the file can be downloaded. You will have to communicate this password to any intended recipients of the file through some other secure means (phone, encrypted email, etc).
4. Once you click share, a publicly accessible URL to download the file will be created, any email addresses you’ve entered will be sent an email notifying them that file is now available at the generated URL, and the URL will be displayed.
5. You may view the publicly accessible download URL and send it to additional people by email at any time after you share the file publicly by clicking on the “(view link)” text next to the Public Share checkbox.

You can find more information about FileLocker on these web pages:

http://www.itap.purdue.edu/service/catalog/detail.cfm?id=126
http://www.purdue.edu/securepurdue/services/index.cfm

Here is the direct link to the FileLocker login page (requires Purdue career account to log in):

https://filelocker.purdue.edu

Thank you and happy file sharing!

–Education IT

Software for your personally owned computer equipment

Dear Education Community,

Purdue has new pricing and a new online purchasing system for software that you can use on your personally owned computer equipment.  Purdue Faculty, Staff and Students are eligible to purchase the software.  To access the online software store, please navigate to the following link, scroll to the bottom, and select, “Purchase as Individual (Kivuto – formerly e-academy)”:

Purdue Licensed Software
https://www.itap.purdue.edu/shopping/software.cfm

Thank you.

–Education IT

Blackboard Learn 9 Resources

The Purdue ITaP Academic Technologies Group has created a web page with Blackboard Learn resources.  if you’re just getting started or if you need help with advanced fetures, please see this page:

Faculty Resources for Blackboard Learn
http://www.itap.purdue.edu/learning/tools/blackboard/learn_res/faculty.cfm

ITaP Academic Technologies Consulting:

Phone: 49-63257
Email: tlt-consulting@purdue.edu
Request a consultation:
http://www.itap.purdue.edu/learning/staff/resform.cfm

The Purdue Instructional Development Center has also posted Blackboard videos on YouTube here:

Blacboard YouTube Videos
http://www.youtube.com/user/purdueidc

For example, here is a video showing how you can easily upload a video into the new Purdue Kaltura streaming video system via Blackboard Learn:

Uploading Media through Kaltura
http://www.youtube.com/watch?v=Ag0zT9ldn5s

If you need a personal consultation regarding Blackboard, you can contact Blackboard support staff using this contact info:

Email: tlt-consulting@purdue.edu
Phone: 49-63257
Web: http://www.itap.purdue.edu/learning/staff/resform.cfm

Ongoing Blackboard training sessions can be located here:

Blackboard Learn Training
http://www.itap.purdue.edu/training/courselisting.cfm?ID=78

The main Purdue Blackboard login page can be found here:

Log into Blacboard…
http://www.itap.purdue.edu/learning/tools/blackboard

Thank you and happy semester!  🙂

–Education IT

Make Mutli-point Telephone Calls

If you need to make a multi-point telephone call (up to 6-way) from a Purdue phone, here’s how you can do it…

1. You can call the operator and the operator can assist you in making a multi-point phone call at no charge (up to 6 parties).  First, dial zero to reach the operator and let them know you need to make a call with up to 6 numbers.  Then you’ll need to give the operator the phone numbers that you want to call.  If there are long distance numbers, you’ll also need to give the operator your MURS number.  The operator will make the calls for you immediately and charge your MURS number for any phone numbers that are long distance.  You can make use of this service at any time.

 2. All Purdue phones can make six way calls, but it requires a feature activation from the phone office.  There is a one-time $10.00 activation fee to enable the phone to make 6 way calls, and then there are no additional charges for this service other than normal long distance charges.  For more info about 6-way calls, see:

 http://www.itap.purdue.edu/telephone/services/operator.cfm#conferenceCalls

“6 party conference – available on all sets, but must be an assigned software feature, contact 44719 to arrange to have this on your phone”

 3. When there are only three end-points, conference calls can be made directly from any phone.  Here is a link to the phone user guide that shows how…

 https://www.itap.purdue.edu/telephone/doc/SingleLine.pdf

 THREE WAY CONFERENCE

Allows you to add a third party to an existing conversation.

 To conference with a third party off-campus . . .

 Advise caller that you are adding an additional party to the call and ask them to hold

FLASH

(listen for special dial tone)

 KEY IN desired number (remember to include7 for off campus, 8 for SUVON, etc., before the desired number.)

(listen for ringing)1

Announce conference privately 3

 FLASH

Three way conference is established

 1FLASH twice to return to original caller if busy or no answer

2If party refuses conference, ask them to hang up: WAIT. You are automatically reconnected to the original party

3If party refuses conference, ask them to hang up: WAIT. FLASH to reconnect to the original party

Note: If both conference callers are off-campus, in some cases, the conference may be disconnected if the on-campus party hangs up.

Purdue IT Security Incident Response

Dear College of Education,

The Education IT team recently attended Purdue IT Security Incident Response training.  Because some of you have access to restricted and/or sensitive Purdue data, we want to communicate our checklist for how we must respond to an IT Security Incident in your area.  We’re sorry for such a long email that follows.  The reality is that there is a lot going on behind the scenes in IT security and Purdue is legally bound by numerous federal, state and local laws to respond to IT security issues.  We feel it is important to pass some information along and keep everyone in the loop.  Please see the following PDF document:

http://social.education.purdue.edu/edit/wp-content/uploads/2012/04/2012-04-23-Purdue-IT-Security-Incident-Response.pdf

Thank you!

–Education IT (edit@purdue.edu)