2024 UNC CAUSE

This proposal provides an overview of the current state of security operations at a university, highlighting successes and areas needing improvement. It presents perspectives from a security operations professional, a systems operations specialist, and a manager. The university uses advanced systems for intrusion detection, demonstrating effective detection and prevention. The incident response plan is robust, well-tested, and minimizes damage. Security awareness training has significantly reduced phishing attacks. Email security is enhanced with comprehensive hardening measures. Access control is fortified with multi-factor authentication (MFA), regular audits, and strong physical security measures. Challenges include users with administrative privileges, which pose security risks. Efforts are ongoing to limit these privileges with MFA at UAC prompts. Resource constraints affect advanced security measures, with a single operator managing data center security. A dedicated security team is needed to improve coordination and security posture. Improved interdepartmental coordination and standardized practices are essential. This proposal emphasizes the need for continued collaboration within the system, sharing best practices, resources, and innovative ideas to enhance security posture collectively. Establishing forums for security professionals to share insights can lead to more effective strategies, ensuring a safe environment for all institutions within the system.