Information Security

 

IT Security

Introduction

The Information Security Team can support your division, department or faculty to review security controls in existing technologies, or support projects that are bringing in new technologies to ensure that adequate security controls are built in.

Vulnerability Scanning

The Information Security Team offers a vulnerability scanning service to assess your network infrastructure’s exposure to attack from the Internet. 

A vulnerability scan is an automatic process that tests Internet-facing systems (e.g. websites, network devices) to find systems that are misconfigured or found to contain known vulnerabilities within your network. Our scans are performed using a leading commercial vulnerability assessment tool which is constantly updated with intelligence regarding new and emerging threats. 

The results of scans are summarised in a report which prioritises the issues and gives you clear and actionable recommendations to fix them.

Benefits

  • Improve the overall IT security of your network infrastructure and applications by identifying and fixing security vulnerabilities before an attacker can exploit them.
  • Gain confidence in the security of recently deployed or changed systems and measure progress over time as you harden your network infrastructure.
  • Comply with the University’s information security requirements for quarterly vulnerability scanning.
  • Comply with industry best practice requirements for internal vulnerability scanning e.g. the Payment Card Industry Data Security Standard (PCI-DSS) and Cyber Essentials.

Service Details

The service is available to all parts of the collegiate-University and is provided at a cost of £200 (+VAT for non-departments) per year. This includes the initial set up, 4 quarterly scans for any given scope.

After each scan, you will receive a report including an executive summary, technical breakdown and detailed recommendations to remediate any vulnerabilities discovered.

Contact Us

If you are interested in this service or you want more information, please feel free to contact us at oxcert@it.ox.ac.uk.