Harvard Management fine-tunes security - Network World

Skip Links

DNSstuff.com
Get information about your IP
IP Information
50+ On-demand DNS and network tools

Security

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library.  Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Audio

BitTorrent blocking; SQL injection attack. Listen now!

Network World 360

Hacker writes Cisco rootkit; Microsoft launches online telescope. Listen now!

Network World 360

Additional Resources

RSS

FEATURED WHITEPAPERS

Endpoint Security: Data Protection for IT, Freedom for Laptop Users Absolute Software

The movement towards laptop computers has fueled an unprecedented number of data breaches. For IT and Information Security, encryption and training has proven ineffective against careless users and insider threats. This paper discusses these limitations and explains how endpoint security allows remote deletion of sensitive data, tracking of computers outside the network and the physical recovery of missing computers. Learn how you can ensure mobile data protection regardless of end-user interference.

RSS

FEATURED REPORTS

Executive Guide: Storage Heats Up HP

Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.

RSS

FEATURED WEBCASTS

Discover how to Create an Orchestrated Data Center through Virtualization Novell

IT professionals like the idea of consolidating hundreds of servers into only a few, but it takes a lot more to cost effectively consolidate and virtualize servers. Watch this six-chapter webcast, "Reduce Complexity and Cost - Windows Server Consolidation with Virtualization" to learn how to effectively consolidate your Windows environment. One of the themes explored includes the characteristics of an orchestrated data center, which includes: Resource management, dynamic provisioning, job management, policy management, accounting and auditing and real-time availability. Learn more about orchestration and much more today. Register below to learn more and be entered to win an Archos 605 Portable Media Player.

IT Buyer's Guides

View All Buyer's Guides

Free Newsletters

Sign up and receive the latest news, reviews and trends on your favorite technology topics

Save The Date!
What They Are Saying

botnets dont make ur comp slow- Anonymous

Join the Discussion

Harvard Management fine-tunes security

Company gets ISO 17799 security health checkup
By Ellen Messmer , Network World , 07/24/2007
  • Social Web 
  • Email 
  • Feedback 
  • Close

Harvard Management Co. may sound like the name of just another braintrust, but don’t be fooled: it’s the high-powered investment firm managing Harvard’s whopping $30 billion endowment.

About 170 investment professionals situated across three floors of Boston’s Federal Reserve building are busy on phone and computer-managing funds in everything from stocks to real estate, and making use of a network that connects into the Depository Trust and Clearing Corp., the international SWIFT banking network as well as a disaster-recovery facility connected by dark fiber several miles away.

“The trading volume runs between 200 to 400 trades per day, and the value is high,” says John Bergen, CIO in charge of the technology side. “Security is always a concern.”

Bergen said he wanted to get an objective view on how well Harvard Management was doing in terms of security, so he invited consultants from SystemExperts to review the firm’s operations and practices against the benchmark of the ISO 17799 standard. Harvard Management develops a lot of its Java-based applications internally and has wireless LANs providing office connectivity.

“It’s a way for us to learn about how to follow best practices,” Bergen says. The ISO 17799 standard is a sort of security health checkup based on 10 fundamental controls that range from business-continuity planning, system-access control, physical and environmental security, to security policy and compliance.

Bergen said the ISO 17799 review, which took place last spring over the course of more than a month and cost about $60,000, helped the four dozen technology professionals in Harvard Management’s IT group fine-tune their practices and procedures.

“The ISO 17799 showed us there were some things we weren’t doing that we should be doing,” Bergen said. “We didn’t have a written security to define specific things, such as how passwords should change. There were other things a well that pertain to us.”

The ISO 17799 review done by SystemExperts turned out to be very interactive, with Harvard Management providing written responses to questions and sessions on site to validate the answers.

1 | 2 |  Next >
Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.
First Name
Last Name
E-mail
Zip Code