AUC Device Management Project

The AUC Device Management Project is an institutional strategic direction aimed at managing and securing AUC digital assets and their configurations, through a centralized system.

Last Updated : Dec 01, 2024

Latest Updates About the AUC Device Management (DMS) Project

Universities continue to face cybersecurity risks as they manage extensive amounts of sensitive and proprietary data, including personal identifiable information belonging to faculty, staff and students, making them prime targets for cyberattacks. This is why protecting AUC's network and digital assets is a priority. For the past several months, AUC has been rolling out a Device Management Service (DMS), which helps to protect the device and the data on it. A DMS protects the University’s network from cyberattacks that take advantage of vulnerabilities of unprotected devices. The majority of our faculty and staff have already registered their University-owned Windows desktops and laptops. We are now urgently requesting the remaining faculty and staff to enroll their devices in DMS by December 8, 2024. After this date, all unregistered Windows devices may lose access to AUC digital resources, including access to the shared folders and network printers. If these devices continue to be unregistered, they may even lose access to the WIFI.

What You Need to Do

To enroll your Windows device, contact your IT representatives or Central IT, and to support you promptly complete this process. Mac devices will be enrolled in the next phase towards the beginning of the spring semester, but report them now to facilitate inclusion and minimize disruption later. The plan for enrolling Mac devices will be announced .

For support and additional information:

Contact your department’s IT representative or Central IT to schedule an enrollment appointment.
If you experience a technical issue or require support related to the DMS, email [email protected] or open an IT ticket.
Visit the Digital Transformation webpage, where you’ll find details about DMS objectives and implementation. You can also visit our comprehensive list of frequently asked questions.
Use our online feedback form for feedback and suggestions.

Take action now to ensure your devices and the university network are secure!

Benefits of Joining AUC Devices to the Device Management System

Joining the DMS offers numerous benefits for both the institution and individual users. These include enhanced safeguarding of AUC assets against security threats, improved tracking and management of hardware and software resources, enhanced security configurations, and timely application of updates and security measures to address vulnerabilities.

Actions Involved in the AUC Device Management System Project

Joining the AUC Device Management System means taking technical actions to properly manage AUC assets. These actions include:

Users are not allowed to freely install or uninstall programs without permission.
When using AUC devices, users must use their AUC login information rather than any local or temporary accounts.
Each device is given a specific name that helps AUC identify and keep track of it.
AUC ensures that devices have their operational and security logs, configurations, and settings properly enabled.
Users are not allowed to uninstall or disable any security programs that are installed on the device.
AUC remotely delivers updates for both operational and security-related programs on the device.

AUC Device Management System Project Phases

The project will be divided into three main phases to ensure a systematic and efficient process of joining devices to the DMS.

This section will be regularly updated to keep everyone informed about the progress and any necessary actions to be taken.

Phases

Phase 1

Adding Windows devices of the AUC New Cairo campus.

Phase 2

Adding Mac and Linux devices of the AUC New Cairo campus and Windows devices of the AUC Tahrir Square campus.

Phase 3

Adding Mac devices of the AUC Tahrir Square campus and mobile devices of both campuses.

Joining the DMS Process

To ensure a seamless transition, clear communication, and personalized support, users can expect soon an email from our AUC DMS Implementation team holding instructions and guidance, as well as a request to schedule a suitable time slot for the DMS joining process.

Privacy Notice for DMS

Due to the increased cybersecurity threats, devices must be appropriately secured to connect to the University’s network. The intent is to ensure all AUC digital assets are secure and well-protected through participation in the Device Management System.
Protecting individual privacy and personal data while protecting the university’s devices and data is a top priority. This Privacy Notice explains how your information is collected, used, and safeguarded when your AUC digital asset becomes parts of the Device Management System (DMS).

Knowing what is attached to the network is critical to identify and remediate security vulnerabilities.
Data below is collected to identify devices and determine if there is malicious behavior.

Hardware data such as device model, serial number, manufacturer, Processor type and speed, RAM Size, storage capacity are used to assign unique device name, ensure the device is properly configured and functioning and assess the device's vulnerability profile.
Operating System data such as operating system version, last boot time, language, installed applications are used to assess the device's vulnerability profile, identify outdated software, and detect anomalies.
Network data such as DNS name, IP address, MAC address used to monitor network traffic, ensure secure network access, detect unauthorized access attempts, and identify potential threats.
Details about the username that has logged in on the machine, what programs are run, what links they accessed and the names of programs and files that are read or written, and records network activity to identify suspicious processes and programs. The content of files and links are not collected or accessed.

In cases of proven malicious behaviors, details of online activity will be monitored if they pose direct and explicit threat on the computer to be able to prevent further attacks and mitigate risks.
Device management system does not grant access to the contents of your emails, chats, files, meetings, passwords, contacts and events.

The data collected is strictly limited to the following purposes:

Report and automatically addresses suspicious activities and security threats on AUC devices.
Timely apply security patches and measures to address vulnerabilities on AUC devices.
Manage and secure device configurations and software updates.
Implement and enforce security controls on AUC devices.
Facilitate the management and enforcement of encryption measures on AUC device hard drives.
Mitigate potential technology errors by limiting user changes at the system level.
Implement user access controls.
Identify and keep track of AUC's hardware and software resources.
Improve system performance and user experience.
Verify the integrity and authenticity of software used by AUC.

Minimal data is shared on a need-to-know basis to the following entities:

Internal Access: Limited authorized IT administrators have access to data to be able to fulfill their roles and responsibilities. Access is granted based on strict access control rules and all IT administrator(s) activities are logged and maintained.
Vendor access: Vendor employees might have limited access to anonymized data about computer processes and malicious techniques to identify new patterns of malicious behaviors in order to dynamically protect customers and improve capabilities. Access to this data is instructed and audited by AUC.
Cloud Storage providers: The data is stored on secure cloud servers. This ensures that the data is protected and can be accessed as needed for security purposes.
Compliance and Legal Requirements: Data may be shared with regulatory bodies or legal entities if required by law or for compliance purpose.

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. The following measures are taken to ensure privacy and security of the data:

Access Control: Role-based access controls ensure only authorized personnel can access sensitive data.
Encryption: Data at rest and in transit is encrypted to protect against unauthorized access.
Confidentiality Agreements: All AUC employees, including authorized IT administrators, sign confidentiality agreements.
Training and Awareness: Regular privacy and security training is provided to system administrators.
Audit Logs: Audit logs are maintained to ensure authorized employees access data only on a need-to-know basis.

If you have any questions or concerns about this Privacy Notice or our data practices, contact us at [email protected]

Have a Question?

If you have any questions, suggestions or concerns related to the AUC Device Management System project, feel free to submit them through our online feedback form.

You can also visit our FAQs page for the most common questions you may have about this new project. Additionally, the IT support team will be available for help. If you encounter any issues, open an online ticket. They will be available to assist you and address any concerns you may have.