1. Active Directory Security Improvements
November 27, 2017 | Smith Campus Center

2. Agenda Vision Meeting recap/New items Plan and resources
One Harvard – One Active Directory
Questions and feedback

3. Active Directory Security Improvements – Vision
4/8/14
Active Directory Security Improvements – Vision
The Vision for Active Directory Security Improvements
To significantly increase the resiliency of the University’s core Active Directory deployments to attacks, resulting in fewer security incidents with less impact.
Objectives
Guiding Principles
Key Performance Indicators
Understand and remediate security risks across campus Active Directory instances
Design and implement a transitional strategy to secure privileged credentials
Build a single University Active Directory for all schools and centers
Improve security
Improve availability and resilience
Reduce complexity
Reduce cost
Adherence to standards with measurability
Schools/centers participate in gap analysis and defined risks are documented
Schools/centers have a transitional plan to protect privileged credentials
Creation of new University Active Directory and documented plan for onboarding of schools and centers

4. Prior Meeting Recap/New Items
One Active Directory
Likely 3 ADs? (HUIT, HLS, HBS)
New items
Positive feedback from both HKS and HLS for gap analysis
All schools scheduled to participate

5. Plan and resources Our plan involves three key actions: Resources:
Perform a gap analysis of each Active Directory and remediate critical issues
Secure privileged credentials across all Active Directories
Design and implement a shared Active Directory service centered on standards and best current practices
Resources:
Virtual team of seven people from HUIT including members of IAM, MCT, Information Security
Representatives from each school
Vendors (Microsoft and other Active Directory experts)

6. Project Timeline

7. One Harvard: One Active Directory
11/12/2018
One Harvard: One Active Directory
Value
One Identity: Simply login experience. Use Harvard Key to gain access to all resources
Enables collaboration, on premise and in the cloud, across all of the Schools and centers
Reduce cost in FTE and infrastructure needed to run 40+ Active Directories across campus
Better Security: Unified protections, robust monitoring, managed incident response
Challenges
Migration: cost and time associated to migrate to new Active Directory
Perception around SLA and responsiveness
Cost model and staffing for operational tail of new Active Directory

8. Questions and feedback