Definitions

Must connect to UVA servers using UVA's High Security Virtual Private Network (HSVPN), and a home network that employs a properly configured home firewall/router.

See the policy, standard, or procedure referenced for details about when this item is required.

Networked-device vulnerability scans (e.g., Nessus) must be performed and remediated at least twice a year.

Should connect to UVA servers through approved secure on-Grounds networks (More Secure Network, Secure Clinical Subnet, eduroam wireless), or from home using one of the UVA supported VPNs.

Must connect to UVA servers through approved secure on-Grounds networks (More Secure Network, Secure Clinical Subnet, eduroam wireless), or from home using one of the UVA supported VPNs
 

The capacity for data users to enter, modify, delete, view, copy, or download data.

 An administrative account is an account that is used interactively by administrators or other persons for service administration or management.

Administrative privileges are a level of permission that allows the user to install software and change configuration settings on a workstation (also known as administrator or admin privileges).

Antimalware is a type of software program designed to prevent, detect, and remove malicious software (malware) on an electronic device.  Although it is similar to antivirus, it has important differences from antivirus. Antimalware has more advanced features such as behavior monitoring that scans for suspicious behavior or files on the device. It can prevent malware from installing.  It addresses spyware, spam, and other threat issues that antivirus usually does not.

Application control software is an application that prevents unapproved software from running on a device and provides additional control over the software that runs on that device and records actions such as software installations and administratively privilege activity (e.g., Carbon Black Protect).