防止资料遗失(Spirion)

Spirion is a program that locates Protected 一级数据 in files such as Word, Excel, PDF和其他常见的文件类型. 除了定位1级保护数据外， Spirion can perform actions on 位置s that contain Protected 一级数据. 这样的 actions include the ability to Shred (securely delete) and Redact (mask specific sensitive 数据)，以保护自己(或他人)免遭身份盗窃.

开始

扫描完成后，会弹出一个结果窗口，如下图所示:

1. 点击“高级”
2. 浏览每个匹配项并在以下选项中选择:
   1. 撕碎，安全永久地删除文件. 这是一个永久性动作 这是无法挽回的.
   2. Redact, which replaces or “masks” the sensitive data with dummy data. 这是永久性的 无法撤销的行动.
   3. Ignore, which is for false positives -- your ignored matches will be remembered and will not need to be repeated in subsequent scans, in most instances.

Please note: Spirion was formerly known as "Identity Finder" - these terms are interchangeable.

This tool will find and assist you with protecting Level 1 Protected Data (PII), or 可用于身份盗窃的其他数据元素. 这些数据会让某些人 to steal your identity by obtaining them individually, or by using them in combination 彼此之间. 这些数据包括:

• 社会安全号码
• 信用卡号
• 密码条目
• 银行账号
• 驾驶执照号码
• 护照号码
• 澳大利亚、加拿大和英国的身份证号码

The types of files that Spirion searches for are Microsoft (Word, Excel, Access, PowerPoint, etc.) Adobe (PDF), text files, web files, compressed file and other common file types 它们更有可能存储一级数据. 这些数据可以来自广泛的范围 活动和记录，包括以下内容:

• 老班名册
• 旧学生时间表
• Demographics data and records requested by federal agencies or professional organizations
• 人力资源记录
• 学生报告

The Information 安全 Office recommends destroying any confidential information 哪些不再需要.

• 我系统里的这个新图标是什么?

  • This is the logo of the Spirion “dog”, whose presence in the system tray indicates Spirion在系统中运行.

• 为什么上海大学要实施Spirion?

  • The number of data breaches continues to rise and cyber criminals are now targeting 前所未有的大学. 我们中的许多人都没有意识到我们可能会把校园 at risk by having sensitive 一级数据, also known as personally identifiable information (PII)，在我们的工作站上.  加州州立大学(CSU)和受影响的讨价还价 units recognize that data breaches are detrimental and to minimize risk have agreed that CSU campuses may proceed with implementing Spirion data loss prevention software.  Spirion is a program that scans laptops and desktops to help locate Level 1 information 并安全地删除或修改(刷洗)文件.

    菠菜网lol正规平台在法律上也要求保护委托给其管理的个人信息. PII是一把伞 term for information which 菠菜网lol正规平台 classifies as 一级数据 that is linked to an individual person's identity, such as Social 安全 Numbers, driver license data, and credit card or bank account information which can be used to facilitate identity theft.  因为 of the damage that inadvertent disclosure of protected information may do to the University, a campus-wide effort to locate this type of information is under way to ensure that 有足够的保护措施. 

    泛化的或充满行话的术语是不应该做什么的例子.

• 员工和教职员工需要做什么?

  • Some employees are going to find some amount 1级数据 and many times will not 意识到它的存在吗. 数据可能在一个意外保存的文件里，一个文件 that was saved years ago or information automatically saved by a program or 过程. Spirion will empower employees to discover what protected data is on university computers and to provide the tools to manage it effectively and reduce security risks.

    The search results will contain the date, 位置, number of matches, and the type 在计算机上找到的1级数据. 保护受保护的数据免受不必要的影响 risk, employees will be able to securely delete the protected data no longer needed, ignore the data if it is incorrectly identified, or move the protected data to a secure 位置.  Employees may choose to contact the 菠菜网lol正规平台 Help Desk or their divisional IT support representative to help with usage of Spirion or the removal or re位置 1级数据.

• 这个程序会把我的数据发送给IT吗?

  • No private or protected data will be saved or transmitted by Spirion. 唯一的数据 Information 安全 Office will receive is metadata: file path, computer, user, time 扫描，并采取行动. 任何识别信息本身的任何部分都不会被发送， 只有找到匹配的信息. 

• 什么是校园工作站?

  • 所有科罗拉多州立大学的电脑都是学校发的.

• 如果我访问上海大学.edu, 菠菜网lol正规平台One, or 菠菜网lol正规平台 Email from my private device, will Spirion be 安装在我的个人机器上?

  • No. Spirion只在犯罪现场组拥有的机器上安装和扫描.

• 为什么Spirion要查看个人信息.g.、收藏夹/书签?

  • The Spirion application needs to scan anywhere on your CSU owned machine where Level 数据可能在无意中被存储. 这是确保不受保护的安全措施 一旦系统遭到破坏，数据就会丢失.

Spirion在哪里搜索?

Spirion will search through specific folders in your computer's hard drive for Protected 一级数据. 这些包括但不限于:

• 本地用户文件夹(文档、桌面、下载、音乐等.)
• Web Browsers (saved passwords, browser cache, Favorites/Bookmarks, etc.)
• Windows注册表

Spirion will not search certain folders reserved by the Operating System like C:\Windows\, as these are typically write-protected and require admin privileges to access. San Jose State University and its employees are responsible for PII data for individuals 它被收集和存储. 如果您对存储的数据有疑问， 至于你是否应该寄存，请问你的经理.

For future reference, our Quick Scanning Guide can assist you in launching, searching, 粉碎、忽略和保存结果.

需要注意的一些事项

The scan will be scheduled for after-hours, initially on a bi-weekly basis, and later 随着我们更全面的部署，到一个月一次. 如果扫描不成功，因为 user is not logged in, or the computer is not on, the scan will occur at the next 用户登录.

谷歌硬盘也在扫描范围之内.

右侧的预览窗格显示找到的匹配项的详细信息.

It may be useful to press “Collapse All Rows” to show a list of Locations (files), 而不是每个特定的匹配. 地点的数量将远远少于 总匹配数.

Continue to go through each Match until you’re done with all Matches.

CFA & CSUEU审查

CSU labor relations and system-wide Information 安全 reviewed the Spirion deployment, and has recognized the importance and the value of this implementation to our security 过程.

CSUEU Approval [pdf]: 3/3/14, “The parties acknowledge that CSU is required by law and CSU policy to monitor and protect the security of data used and stored on its systems and acknowledge the importance of working together to ensure the security 数据.”

CFA Approval [pdf]: 7/21/14, “The parties acknowledge the importance of working together 以确保在CSU系统中使用和存储的数据的安全."

政策

ICSUAM政策8065.0 [pdf] - Information Asset Management from the Information 安全 CSU综合行政手册的政策部分

对于Spirion的支持， 提交帮助请求.