1. Information Security Update Marty Masters Division of Information Technology

2. 2 Cabinet Area/Dept Active Hosts Severity 5's Severity 4's Severity 3's Severity 2's Severity 1's Student Affairs Enrollment Management48594510428 DPRC300072 DPS000000 SHS****** SA - Subnet49900182 Total of Student Affairs 60594611932 Academic Affairs AT 2452870492793220 Library 11292233339654143 ORSP 000000 Total of AT, Library & ORSP1374501038311447363 SF State Campus NOVEMBER 2013 Vulnerability Scorecard

3. 3 Cabinet Area/Dept Active Hosts Severity 5's Severity 4's Severity 3's Severity 2's Severity 1's Colleges College of Business 275113314 DTC - Subnet 08140515253 CEL - Subnet 5631116537715 COB/DTC - Subnet 57400370 DTC - Subnet 58300030 College of Education, Graduate52035611528 College of Ethnic Studies Subnet 33300030 College of Health and Social Sciences8700181724 CHHS - Servers110010 15 College of Liberal & Creative Arts12661317818729 College of Science and Engineering 31335110459816159 Psychology Subnet 2610002182 Tiburon Center428186210316 Total of Colleges723551668691412295 Total of all Academic Affairs209710526917002859658

4. 4 SF State Campus NOVEMBER 2013 Vulnerability Scorecard Cabinet Area/Dept Active Hosts Severity 5's Severity 4's Severity 3's Severity 2's Severity 1's Administration & Finance A&F - DoIT & OAD End Points/Workstations 351110346 A&F - DoIT Datacenter Scan - Oracle Servers * A&F - Fiscal Affairs 84111716649 A&F - NAD99241919557 A&F - CY/PO, PP&D37162610614828 A&F - UPM & Housing29183425057699 A&F - DoIT Datacenter7800012010257 Total of A&F132628665221221296 Advancement Foundation, University Advancement, University Communications 2387528813 Athletics11113162 Total of Student Affairs 34985510415 Other: Auxiliaries Cesar Chavez Student Center,Subnet45270319398 November 2013 Mid Month Scan Totals3544147355234243421009

5. 5 In Review: NOTES: This data is from unauthenticated scans. Authenticated scans are expected to generate 30-60% higher numbers and require the asset owner to provide credentials to the scanner. * - Data for the Student Health Services is provided by an outside vendor. * * - Scan incomplete, awaiting troubleshooting report from The Systems Team. The data shown uses an exclusion list which does not show any of the Brother, HP, Dell, Ricoh or any other printers on campus.