Information Security

Content on these pages is directed at the university's IT professionals. For general information, please visit our website.

About the TTS Information Security Team

The Information Security Team provides leadership across all campuses to protect the University's overall mission. We primarily work to protect sensitive data and important University information. One of the primary manners of achieving this is by offering flexible consulting to Information Stewards on ways to cost-effectively identify, analyze and manage risk to sensitive information assets. The Security Team also provides support for legal compliance and security issues, working with partners across all schools and departments to continuously improve our collective ability to prevent, detect, respond to, and recover from incidents that affect the security of our proprietary data and the personal information entrusted to our care. We are responsible for coordinating and implementing a University-wide security management program to ensure the continuous confidentiality, integrity, and availability of information assets owned and used by the university community. The Information Security program is shifting a historical focus from a network centric-perspective to one that is data-centric, consultative, and university-wide.

Key areas of focus for Information Security include:

Information Risk Management
Vulnerability Assessment and Validation
Information Security Monitoring
Incident Response and Management
Advice on Policies and Procedures
Infrastructure Protection
Awareness and Training

Information Security Services

Contact us for these services

Information Security Services	For	Getting Help
Security Incident Response	Faculty, Staff	information_security@tufts.edu
Forensic Investigation (with approvals)	Faculty, Staff	information_security@tufts.edu
Identity Finder/ Information Security	Faculty, Staff, Students, Affiliates	Information Stewards
Secure Destruction	Faculty, Staff	Information Stewards
Information Security Training	Service Owners
Log Aggregation and Monitoring	Service Owners	information_security@tufts.edu
Sensitive Information Business Practices Review	Staff	information_security@tufts.edu

Additional Services (self-provided)

Information Security Services	For	Getting Help
Mobile Device Security	Faculty, Staff, Students, Affiliates	information_security@tufts.edu
Information Security Training	Service Owners
Application Security Self Scanning	Service Owners	information_security@tufts.edu
Network Security Self Scanning	Service Owners	information_security@tufts.edu

Helpful Links

Services	Contact
Student support	TTS Service Desk
Whole Disk Encryption	TTS Service Desk
TTS Service Desk	TTS Service Desk
Web-based Virtual Private Network	VPN
Firewalls	TechConnect
General issues, opening a ticket	TechConnect
Sensitive Data	Information Stewards

How to Contact Us

If you have questions or concerns about any of the services we provide or need assistance with securing information, please contact us for help. You can also contact Frontline Support Providers for assistance or check Tufts's TechConnect for an IT help desk and more.

When to Use	Description	Hours	Phone/Email
For sensitive issues	Department phone, rings on all desktops	Answered when on premises, 9:00 to 5:00	617-627-6070
External reporting of incidents to Information Security, automatically makes a ticket in the RT abuse queue, cc:ed to Information Security and USG Email groups	RFC email address; Sent to abuse ticket queue	Any time of day or night	abuse@tufts.edu or security@tufts.edu
For questions, reports from within Tufts.	Question/Request email address Sent to abuse ticket queue	Any time of day or night, response may lag outside business hours	Information_Security@tufts.edu
For FYIs, or facilitating an ongoing discussion with the group.	Team distribution list; team discussion list	Any time of day or night, response may lag outside business hours	IS_team@tufts.edu automatically changes to: UIT-Info-Security@tufts.edu
Notify Information security staff in the event of a suspected payment card breach	Email list	Any time	pci-security@elist.tufts.edu