Page Comparison

Introduction

Spinup provides a secure platform for hosting resources with sensitive data, compliant with standards like HIPAA, PHI, and FERPA. This guide highlights the current resources available for sensitive data hosting and key security measures, adaptable to future updates in operating systems and technologies.

...

When setting up a new space, you'll complete a risk assessment to determine the data hosting capabilities. Accepting the Spinup Security Agreement is essential for spaces classified as moderate or high risk.

...

Servers

All server options are pre-configured with essential security features, including firewalls and multi-factor authentication. The specific configuration details align with the latest security best practices for each server type. Typically, web services are restricted to secure HTTPS connections, usually on port 443, necessitating corresponding firewall settings.

Databases

...

These databases feature at-rest encryption, centralized logging, and support for SSL connections. Access is restricted to servers within the same Spinup space, enhancing data security.

Using a Storage@Yale share on your secure server

You can request and mount a S@Y share on your Spinup secure server .

...

From the Spinup UI, request a S@Y share - this will open a ServiceNow ticket for the Storage team

• In the Configuration section make sure you check "This share will contain High Risk Data"

• This will force the Permissions Model to "Base"

• You need to use CIFS protocol to mount the share on Linux (NFS is not supported for secure shares)

through the Spinup UI. This will open a Service-Now ticket for the Storage team. Once you submit the request it will open a ServiceNow ticket that you can track via

...

Service-Now. You should get notified via e-mail once the share is ready (takes about a day).

When the share is ready you can mount it on your

...

server:

Linux:

• Install cifs-utils

  Code Block
  language bash
  sudo yum install -y cifs-utils

• Mount the share using your AD credentials, e.g.

  Code Block
  language bash
  sudo mount.cifs //storage.yale.edu/home/YXNAT-CC1000-SSPS-AHEF /mnt -v -o vers=3.0,domain=yale,username=netid

...

...

Windows

...

:

• Attach the share as you would with any regular Windows network share.