IRT Information Security Services
IRT Security is here to help you. In addition to keeping the School of Medicine networks secure and operational, we also provide you the tools to ensure your own computer security, and support you in case of a security incident.
By educating yourself now about strong computer security practices, you're taking the first step in preventing computer problems. Below, find the resources explaining the need for strong computer security, and the tools you can use to protect yourself and your information.
News
SUSI: Server Inventory Launch
SUSI (Stanford University System Inventory) will report on information security compliance for your servers (and eventually applications). SUSI automatically verifies many of the University's minimum security standards and highlights potential non-compliance issues. SUSI is being developed to be the one source for a complete system inventory compliance status. Click here for details.
Support ends for Vista
On April 11, 2017, Microsoft ended support for Windows Vista. This means that Stanford machines running Vista are longer compliant with campus security policy. If you're in charge of a machine running Vista, now's your chance to upgrade—or possibly obtain an exception and make alternate plans. Click here for details.
HelpSU is Changing
University IT recently launched the Stanford Services Portal, which is replacing HelpSU in phases. Start at services.stanford.edu to resolve IT issues, and soon to resolve all your HelpSU needs. Click here for details.
MinSec Guide for Cloud
University IT releases new minimum security standards for cloud technologies. Click here for details.
About WinSecure Network
Devices used to manage critical scientific equipment or applications which can't be upgraded to current security requirements may be able to take advantage of the WinSecure Network (it's not just for Windows devices!). This network is used to compensate for the risks posed by devices using unsupported operating systems or which otherwise can't meet the current requirements. Click here for details.
I Need Help!
Lost or Stolen Device — If your device used for Stanford business has been lost or stolen, you're responsible for following all school procedures. This includes reporting the situation immediately to the Stanford University Privacy Office. Click here for the Data Security Program's instructions for reporting a missing device.
Reporting an Incident — How to report a security incident, as outlined in the Administrative Guide.
I Think I've Been Hacked — What to do if your computer or server may be compromised.
What is a DMCA Notice? — What to do if you receive a DMCA notice.
Email Information Security — You can file a Help Request, or contact us at irt-security@lists.
Contact Information Security — Our Information Security team members, with email addresses and other contact information.
Tools & Info
Security Quick Reference Guide — A list of your responsibilities and important security contacts, all in one place.
Encryption — Protecting the sensitive information that may be stored on your computer.
Bastion Access — How to log into Bastion with two-factor authentication.
MedSecureSend — Using Stanford Medicine's secure file transfer service.
How To Secure Your Information — A starting place for protecting the information on your computer: how to encrypt your computer, back up your information securely, and send secure files and email.
Cloud Computing — About cloud-based services and which ones are IRT-approved.
Research and Security — Help with creating a data security plan for your grant proposal.
Information Privacy and Security Policies — Stanford-specific policies regarding computer usage, SUMCnet and HIPAA.
Good Practices — A common-sense cheatsheet for everyday ways to protect your information.
I'm Leaving Stanford
OUR MISSION STATEMENT:
Proactively protect SoM information
Monitor and proactively protect the SoM networks
Provide a variety of information security options to protect resources on the School's networks from disruptions, modifications, and disclosure
Develop and publish requirements for the secure configuration of computer systems on the School's network
Provide information security education and awareness programs to faculty, staff, and students
Data Security Program
The Data Security Program helps you comply with Stanford policy and federal law. Visit for help with encryption, secure storage, and automatic backups.
If you have questions or need assistance, call 650-725-8000 (M-F 7a-6p), stop by the Stanford Medicine Tech Bar on the ground floor of Lane Library (M-F 8a-6p), or submit a help ticket at irthelp.stanford.edu. Even if your question isn't about computer security, we'll be happy to help you find the answer.