November 27 2017 Smith Campus Center Agenda Vision Meeting recapNew items Plan and resources One Harvard One Active Directory Questions and feedback 2 Improve security Improve availability and resilience ID: 728079
Download Presentation The PPT/PDF document "Active Directory Security Improvements" is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
Slide1
Active Directory Security Improvements
November
27,
2017 | Smith Campus CenterSlide2
Agenda
Vision
Meeting recap/New items
Plan and resourcesOne Harvard – One Active DirectoryQuestions and feedback
2Slide3
Improve security
Improve availability and resilience
Reduce
complexity
Reduce cost
Adherence to standards with measurability
Objectives
Guiding Principles
Key Performance Indicators
To significantly increase the resiliency of the University’s core Active Directory deployments to attacks, resulting in fewer security incidents with less impact.
The Vision for Active Directory Security Improvements
Active Directory Security Improvements – Vision
Understand and remediate security risks across campus Active Directory instancesDesign and implement a transitional strategy to secure privileged credentialsBuild a single University Active Directory for all schools and centers
Schools/centers participate in gap analysis and defined risks are documented
Schools/centers have a transitional plan to protect privileged credentials
Creation of new University Active Directory and documented plan for onboarding of schools and centersSlide4
Prior Meeting
Recap/New Items
Prior meeting
One
Active Directory
Likely 3 ADs? (HUIT, HLS, HBS)New itemsPositive feedback from both HKS and HLS for gap analysisAll schools scheduled to participate4Slide5
Plan and resources
Our plan involves
three
key actions:Perform a gap analysis of each Active Directory and remediate critical issuesSecure privileged credentials across all Active DirectoriesDesign and implement a shared Active Directory
service centered on standards and best current practices
Resources:Virtual team of seven people from HUIT including members of IAM, MCT, Information SecurityRepresentatives from each schoolVendors (Microsoft and other Active Directory experts)5Slide6
Project Timeline
6Slide7
One Harvard: One Active Directory
7
Migration: cost and time associated to migrate to new Active
D
irectory
Perception around SLA and responsivenessCost model and staffing for operational tail of new Active Directory
Value
Challenges
One Identity: Simply login experience. Use Harvard Key to gain access to all resources
Enables collaboration, on premise and in the cloud, across all of the Schools and centers
Reduce cost in FTE and infrastructure needed to run 40+ Active Directories across campus
Better Security: Unified protections, robust monitoring, managed incident responseSlide8
Questions and feedback