YDU Information Services

View count: 8108

Information Security Management (ISMS)

Overview of Information Security Management

To ensure the confidentiality, integrity, and availability of the university's information assets and to comply with relevant laws and regulations, the Office of Information Services (OIS) implemented the ISMS (Information Security Management System) certification for the education sector in 2009. The university passed third-party external audits by the Education Institution Security Verification Center in July 2010, and subsequent audits in 2013, 2016, and 2019 confirmed our capability to protect information assets.

The following outlines the main measures the university has taken to maintain information security while providing convenient IT services:

Information Security Certificate

Main Information Security Measures

  1. Strengthened information security awareness among staff and implemented ISMS, obtaining certification under the educational information security standards.
  2. Aligned with the Ministry of Education's "TANet School Information Security Management Standards" program, creating internal security policies and implementing management measures.
  3. Used SSL VPN with 128-bit encryption to provide secure network access.
  4. Automated network management system detects and blocks malicious attacks while notifying administrators via email.
  5. Upgraded campus backbone network to 10Gbps, deployed high-end firewalls and medium-level intrusion detection systems, and established off-site backups to protect critical servers and databases.
  6. Implemented a dual-firewall system to prevent external intrusion and protect internal systems.
  7. Installed smart card access and video monitoring systems in computer rooms, with temperature/humidity monitoring and remote control capabilities.
  8. Deployed spam and email virus protection systems to provide a secure email platform.
  9. Conduct annual cybersecurity training to strengthen self-protection awareness among faculty and students.
  10. Implemented a personal information portal with SSL and single sign-on integration for unified access to IT services.
  11. Established automatic antivirus updates for software and virus definitions to improve efficiency and reduce user burden.
  12. Designed automated password management and reset mechanisms to enhance email account security.
  13. Promoted SSH-encrypted remote connections to prevent theft of credentials and data.