Antivirus Service Rob Bandler May 17, 2016

Agenda Introductions Service Description Value Proposition Metrics Cost Security More information Q&A

Introductions Service owner: Rob Bandler Service manager: Eric Nobel Other service delivery team members: Lillian Isacks Meryl Bursic Tim Bradish, Glenn Larratt, Tom Horton

Service Description Service Name: Antivirus Service Product(s): System Center Endpoint Protection (SCEP) from Microsoft & Symantec Endpoint Protection (SEP) (sunsets October 2016) Brief text description: Endpoint protection software scans computers for viruses and other malicious software and can block, help remove, or contain threats Available to: varies by product license SEP – for all CU SCEP for CU owned devices only Faculty, Staff, Students No fee service Service tier: One

Value Proposition Value proposition Customer impact Key benefits Campus site license – no fee for use Free solutions for non-Cornell owned devices Set it and forget it, runs in the background Generally effective against common virus threats Provides policy compliance (Cornell University Policy 5.10, “Information Security”) Customer impact Improved security of data, operations and business practices Key benefits Provides compliance with policy Cornell University Policy 5.10, “Information Security” Improved data security Improved operational stability Ease of deployment and use Flexible models, standalone, regional or central management

Metrics FY 16, Q3 5251 machines protected by Symantec Endpoint Protection, reporting into the central SEP console 5723 managed devices with SCEP in System Center Configuration Manager 2012 (CM2012) Migration to SCEP by end of 2016 Current cost per machine is $15.00 per year 100% availability of Service

Cost Cost to deliver the service: $144,529.00 per year We anticipate this cost will decline significantly in calendar year 2017 due to the $95,464.00 savings in hardware and software @ 10,000 devices the cost would be $4.25/device @ 15,000 devices the cost would be $2.84/device No fee service

Current Cost

Future Cost

Security What risks does use of the service mitigate? Blocks malware causing… Information/data loss prevention Reputational harm Financial loss Interruption to operations How does the service mitigate risks? Blocks known malware and viruses Policy compliance Improves data & information security Increases operational stability

More information Service web page: https://www.it.cornell.edu/services/antivirus/ Service level expectations: https://www.it.cornell.edu/services/sle.cfm?doc=59 Service catalog entry: http://www.it.cornell.edu/services/servicelist.cfm?s=36 Service quarterly report: http://cio.cornell.edu/resources/it-reports-documents-and-presentations/itcornell-quarterly-metrics/antivirus-services Cornell University Policy 5.10, “Information Security”: https:www.dfa.cornell.edu/sites/default/files/vol5_10.pdf

Questions?