AUC Device Management Project

The AUC Device Management Project is an institutional strategic direction aimed at managing and securing AUC-owned devices and their configurations, through a centralized system.

Last Updated : Nov 24, 2024

About the AUC Device Management (DMS) Project

The actions involved in the AUC Device Management project include joining AUC devices to a centralized Device Management Service (DMS), implementing user access controls, assigning unique device names, enabling security logs and settings, in addition to remotely pushing updates and patches.

The AUC Device Management project holds significant importance as it allows us to efficiently manage, govern, and secure our digital assets. By joining the DMS, we ensure adherence to essential security, management, and compliance standards and laws, thus strengthening the foundation for a secure and compliant computing environment.

Benefits of Joining AUC Devices to the Device Management System

Joining the DMS offers numerous benefits for both the institution and individual users. These include enhanced safeguarding of AUC assets against security threats, improved tracking and management of hardware and software resources, enhanced security configurations, and timely application of updates and security measures to address vulnerabilities.

Actions Involved in the AUC Device Management System Project

Joining the AUC Device Management System means taking technical actions to properly manage AUC assets. These actions include:

Users are not allowed to freely install or uninstall programs without permission.
When using AUC devices, users must use their AUC login information rather than any local or temporary accounts.
Each device is given a specific name that helps AUC identify and keep track of it.
AUC ensures that devices have their operational and security logs, configurations, and settings properly enabled.
Users are not allowed to uninstall or disable any security programs that are installed on the device.
AUC remotely delivers updates for both operational and security-related programs on the device.

AUC Device Management System Project Phases

The project will be divided into three main phases to ensure a systematic and efficient process of joining devices to the DMS.

This section will be regularly updated to keep everyone informed about the progress and any necessary actions to be taken.

Phases

Phase 1

Adding Windows devices of the AUC New Cairo campus.

Phase 2

Adding Mac and Linux devices of the AUC New Cairo campus and Windows devices of the AUC Tahrir Square campus.

Phase 3

Adding Mac devices of the AUC Tahrir Square campus and mobile devices of both campuses.

Joining the DMS Process

To ensure a seamless transition, clear communication, and personalized support, users can expect soon an email from our AUC DMS Implementation team holding instructions and guidance, as well as a request to schedule a suitable time slot for the DMS joining process.

Privacy Notice for DMS

Due to the increased cybersecurity threats, devices must be appropriately secured to connect to the University’s network. The intent is to ensure all AUC owned devices are secure and well-protected through participation in the Device Management System.
Protecting individual privacy and personal data while protecting the university’s devices and data is a top priority. This Privacy Notice explains how your information is collected, used, and safeguarded when your AUC owned device becomes parts of the Device Management System (DMS).

Knowing what is attached to the network is critical to identify and remediate security vulnerabilities.
Data below is collected to identify devices and determine if there is malicious behavior.

Hardware data such as device model, serial number, manufacturer, Processor type and speed, RAM Size, storage capacity are used to assign unique device name, ensure the device is properly configured and functioning and assess the device's vulnerability profile.
Operating System data such as operating system version, last boot time, language, installed applications are used to assess the device's vulnerability profile, identify outdated software, and detect anomalies.
Network data such as DNS name, IP address, MAC address used to monitor network traffic, ensure secure network access, detect unauthorized access attempts, and identify potential threats.
Details about the username that has logged in on the machine, what programs are run, what links they accessed and the names of programs and files that are read or written, and records network activity to identify suspicious processes and programs. The content of files and links are not collected or accessed.

In cases of proven malicious behaviors, details of online activity will be monitored if they pose direct and explicit threat on the computer to be able to prevent further attacks and mitigate risks.
Device management system does not grant access to the contents of your emails, chats, files, meetings, passwords, contacts and events.

The data collected is strictly limited to the following purposes:

Report and automatically addresses suspicious activities and security threats on AUC devices.
Timely apply security patches and measures to address vulnerabilities on AUC devices.
Manage and secure device configurations and software updates.
Implement and enforce security controls on AUC devices.
Facilitate the management and enforcement of encryption measures on AUC device hard drives.
Mitigate potential technology errors by limiting user changes at the system level.
Implement user access controls.
Identify and keep track of AUC's hardware and software resources.
Improve system performance and user experience.
Verify the integrity and authenticity of software used by AUC.

Minimal data is shared on a need-to-know basis to the following entities:

Internal Access: Limited authorized IT administrators have access to data to be able to fulfill their roles and responsibilities. Access is granted based on strict access control rules and all IT administrator(s) activities are logged and maintained.
Vendor access: Vendor employees might have limited access to anonymized data about computer processes and malicious techniques to identify new patterns of malicious behaviors in order to dynamically protect customers and improve capabilities. Access to this data is instructed and audited by AUC.
Cloud Storage providers: The data is stored on secure cloud servers. This ensures that the data is protected and can be accessed as needed for security purposes.
Compliance and Legal Requirements: Data may be shared with regulatory bodies or legal entities if required by law or for compliance purpose.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. The following measures are taken to ensure privacy and security of the data:

Access Control: Role-based access controls ensure only authorized personnel can access sensitive data.
Encryption: Data at rest and in transit is encrypted to protect against unauthorized access.
Confidentiality Agreements: All AUC employees, including authorized IT administrators, sign confidentiality agreements.
Training and Awareness: Regular privacy and security training is provided to system administrators.
Audit Logs: Audit logs are maintained to ensure authorized employees access data only on a need-to-know basis.

If you have any questions or concerns about this Privacy Notice or our data practices, contact us at [email protected]

Have a Question?

If you have any questions, suggestions or concerns related to the AUC Device Management System project, feel free to submit them through our online feedback form.

You can also visit our FAQs page for the most common questions you may have about this new project. Additionally, the IT support team will be available for help. If you encounter any issues, open an online ticket. They will be available to assist you and address any concerns you may have.