UMass Boston

The Information Security Office (ISO) is responsible for keeping the university safe from cybersecurity threats. In order to keep university-owned computers secure, and to keep the sensitive data stored on them private, we have compiled the following list of standard software and configurations that are required for all university-owned computers. This list of software and configurations will be applied at the time that the computer is imaged by the IT Desktop group, before delivery to the end user.

1. Defender for Endpoints (managed Anti-malware platform)
2. Tenable.IO (or any vulnerability management platform)
3. Intune (MDM) /Jamf (Patch Management)
4. Admin By Request
5. Hard Drive encryption
6. Solid login password
7. Screen lock with 3 to 5 minutes of inactivity
8. VPN when in public Wi-Fi
9. MFA (is implemented)
10. Solid Identity management (Defender for Identity)

If an item in this list interferes with a business need, inform the IT Desktop staff person working on your computer, and they will put you in touch with the ISO to discuss other potential options.

This page is based on the UMass Boston Information Security Policies. To learn more, see that document linked at the top of the ISO Homepage..