Active Directory Security Improvements November 27, 2017 | Smith Campus Center

Agenda Vision Meeting recap/New items Plan and resources One Harvard – One Active Directory Questions and feedback

Active Directory Security Improvements – Vision 4/8/14 Active Directory Security Improvements – Vision The Vision for Active Directory Security Improvements To significantly increase the resiliency of the University’s core Active Directory deployments to attacks, resulting in fewer security incidents with less impact. Objectives Guiding Principles Key Performance Indicators Understand and remediate security risks across campus Active Directory instances Design and implement a transitional strategy to secure privileged credentials Build a single University Active Directory for all schools and centers Improve security Improve availability and resilience Reduce complexity Reduce cost Adherence to standards with measurability Schools/centers participate in gap analysis and defined risks are documented Schools/centers have a transitional plan to protect privileged credentials Creation of new University Active Directory and documented plan for onboarding of schools and centers

Prior Meeting Recap/New Items One Active Directory Likely 3 ADs? (HUIT, HLS, HBS) New items Positive feedback from both HKS and HLS for gap analysis All schools scheduled to participate

Plan and resources Our plan involves three key actions: Resources: Perform a gap analysis of each Active Directory and remediate critical issues Secure privileged credentials across all Active Directories Design and implement a shared Active Directory service centered on standards and best current practices Resources: Virtual team of seven people from HUIT including members of IAM, MCT, Information Security Representatives from each school Vendors (Microsoft and other Active Directory experts)

Project Timeline

One Harvard: One Active Directory 11/12/2018 One Harvard: One Active Directory Value One Identity: Simply login experience. Use Harvard Key to gain access to all resources Enables collaboration, on premise and in the cloud, across all of the Schools and centers Reduce cost in FTE and infrastructure needed to run 40+ Active Directories across campus Better Security: Unified protections, robust monitoring, managed incident response Challenges Migration: cost and time associated to migrate to new Active Directory Perception around SLA and responsiveness Cost model and staffing for operational tail of new Active Directory

Questions and feedback