School of Medicine Digital Guardian deployment

Proposed By
Glenn Peacock
Number of Attendees
13
Where will the conversation continue?
Yes
Summary
Stanford Medicine TDS is installing Digital Guardian on some Windows PCs, to allow ONLY hardware encrypted external drives to be writable, for users who attest that they work with High Risk data. How is this going? Learnings so far?
Notes

Digital Guardian Suzanne Schiessler (Information Security Team)

- Digital Guardian Is a control for the usage of regulated external data usage. Losing data is bad and some drives are too easy to lose so (Stanford Security, Legal, and the hospital) got together and determined that the use of the Apricorn drives were the way to go.

If a user said “Yes”  in their AMIE for using PHI then they will automatically get a push regarding the use of an Apricron drive.  

- Out of 1400 deployments only (1) has gotten the Blue Screen of Death
- Only 1100 have checked in and are using the tool
- 200 people have asked for drives Apricorn Drive.  You can request a drive from “Somdrives.stanford.edu”
- In January they expect 2500 more for Windows system to be used by med school users (goal)


If you plug in a non-Apricorn drive you will receive a message about the external device that can’t be used because it’s not an Apricorn drive.  Currently there is a temporary “allow” button but in the future this feature will be removed so that you only use an Apricorn drive.


How are we promoting the site “Somdrives.stanford.edu”?

    •    Through the pop-up when users attempt to use incorrect drive
    •    Stanford med daily website


Usage:
    •    This produce is for both Mac & Windows but currently being used on Windows systems
    •    Currently being used by the hospital
    •    Currently there is no cost for the drives. These drives are “loaned to the user” so they must be returned when they leave the university.

- The Apricorn drives are mailed to users based on the workflow established by Suzanne Schiessler.

Year
2020