In a continuing effort to improve Rensselaer's cyber security posture, the DotCIO is initiating a vulnerability management program.   A vulnerability is any weakness in a system or process that leaves information security exposed to a threat.  This program aims to reduce risk to the Institute by identifying vulnerabilities and ensuring remediation, aiming to reduce the negative impact on the availability, integrity and confidentiality of Rensselaer data and IT infrastructure.

The DotCIO will routinely scan devices connected to the campus network for vulnerabilities.  Identified vulnerabilities will be prioritized and system owners and administrators will be notified with the expectation that the risks will be resolved and potential threats removed.  A majority of vulnerabilities can be addressed by applying the latest relevant system patches or updates.  

In order to protect information confidentiality and individual privacy, scanning will be conducted within the bounds of the Cyber Citizenship Policy.

References (requires connection to RPI network to access):
IT Vulnerability Management Policy
Cyber Citizenship Policy

Any questions please submit a Support Request at https://itssc.rpi.edu

Posted:  12/02/2022