The Endpoint Protection Program (EPP) aims to enhance the security posture of the University by securing endpoints (i.e., workstations, laptops, mobile devices, servers) and associated data against advanced security threats using next-generation anti-virus solutions.
High-level objectives include:
- Provide next-generation anti-virus protection: Enable next-generation anti-virus protection for all University-owned user devices and servers.
- Enable units to manage their endpoints: Provide units with delegated access to their endpoints, including security alerts and logs (where possible).
- Enable integrated visibility for prompt detection and response: Feed endpoint security logs into a common threat detection platform for correlation, analysis, triage and incidence response.
Why Endpoint Protection?
The goal of EPP is to prevent and detect cyber criminals on stealing or altering valuable U of T data and applications or from hijacking the institution’s network, all of which can impact the University’s operations. To have this protection and manage our risk, we need a next-generation anti-virus solution.
It is also part of U of T’s security standards to have endpoint protection. For more information, refer to the U of T Information and Security Standard.
The Endpoint Protection Program is comprised of multiple projects such as the SentinelOne project.