IT Security Office

Steve Schuster, Director of IT Security

The IT Security Office (ITSO) is charged with ensuring the security and integrity of the university's computer systems, networks and data, while maintaining an IT environment that is supportive of Cornell's academic mission and culture.

The office takes a lead role in campus security architecture, policies, standards and practices, including system configuration and management, network access, authentication and authorization, directory services, and data access, transmission and storage.

ITSO is charged with ensuring that the entire campus community -- including users, technical support personnel and decision makers -- is aware of current campus security practices and issues.

Programs and Services

Security Services and Technologies

• Vulnerability Scanning Service - Remote scanning of campus computer systems to detect vulnerabilities.
• Network Firewall Service (formerly Edge ACL Service) - Custom network traffic rule sets for departmental subnets, providing a functionality equivalent to local firewalls.
• Network Monitoring - Watching for anomalous traffic and compromised systems on the campus networks.
• Client Security - Deployment of anti-virus and other security-related desktop system software for campus-wide use.
• Security Consulting - Assessing IT security in both central and college departments and assisting in development of local architectures and solutions.
• More Information about IT Security at Cornell

Identity Management

• Manages the processes and policies required for effectively managing user identity.
• Plans identity management service strategies.
• Manages identity management authentication/authorization products and services, including our Kerberos, Permit and CU WebAuth infrastructure.
• Manages directory services and develops enhancements, including the LDAP server and electronic directory access.
• More Information about Identity Management Services

Operations / Incident Response

• Responsible for response to campus security incidents and threats including viruses, worms, and other system compromises.
• The office assists with investigations initiated by CU Police, the Judicial Administrator, the Audit Office, University Counsel, and other internal and external authorities.
• To report a security problem, please call the Network Operations Center, 255-9900, or send email to security@cornell.edu.