Information Technology Security
Security is not an end-state, it is a process: a continual cycle of deployment, analysis and redesign aimed at protecting both the computer technology and its stored information from an ever-evolving world of threats. The approach most likely to succeed provides “defense in depth” using a series of layers of interacting policies, components and software, such that if one layer fails, another may prevent or detect a compromise.
The goal of these Web pages is to provide some guidance and references for improving host/network security on campus. Some of these links are commonly available information, and are reachable from anywhere. Other linked pages contain information that could be used to aid in an exploit, and so are limited to members of the Colorado State University community via eID authentication.
CSU Security News
- Secure Browser
- Password Tips
- Avoiding Phishing Attacks
- CSU Current Virus Alerts
- Global Virus Information
- Security Brownbags at the Lory Student Center
Theory, Best Practices
- Security Videos Winning entries in 2007 student computer security video contest.
- Protection Polices, procedures and recommended practices for safeguarding your information resources.
- Detection Detection of intrusions, verification of system policies, monitoring and audit trails.
- Response Incident response, disaster recovery and reporting security events.
- SANS Network Security Step-by-Step Guides
CSU Policies and Committees
- Colorado State University Information Technology (IT) Security Policy
(v1.10, Approved by ITEC March 31, 2009) - CSU Campus IT Security Committee
Tools for the CSU Community
- VPN (Virtual Private Networks)
- Secure Access gateway (SSL VPN) An alternative to the Cisco VPN client.
- Computer Virus Information Licensed Anti-virus products, tips, listserv signup
Tools for Subnet Managers (log in with eID) ![]()


