PUBLIC OPENNESS COMES WITH RISKThe

PUBLIC OPENNESS COMES WITH RISK
The Heinz Endowments faces particular challenges when it comes to protecting
its network. This is due to the foundation’s need to be open in its external posture
and public interactions. “We need grantees and the public to have access to our
executives and staff, so we do some things that aren’t best practice, like putting
everyone’s email address on our website,” says Charlie Richardson, Director of
Information Technology, The Heinz Endowments.
In addition, the foundation’s 40 employees routinely scan documents and send
and receive lots of emails with attachments, internally and externally. “A file
marked ‘Xerox’ or ‘PDF’ usually gets opened,” says Richardson. The foundation’s
staff also frequently interacts and shares documents with 30 interns and many
grantees via Microsoft SharePoint. The organization also hosts a Microsoft
IIS/SQL server that’s not part of its internal network. All of this translates to
elevated risk.
Richardson is the one-man in-house IT staff charged with keeping The Heinz
Endowments’ users and content safe, and the network running smoothly. “From
hardware to software, I handle everything,” he says. “Every technology has to
improve how our employees work and interface with our grantees and the
community at large.”
The Heinz Endowments’ incumbent security infrastructure featured two Cisco
5510 Adaptive Security Appliances (ASA). Its core applications include Microsoft
Office 2010 and a grant-making program with a web-based version. Social media
is not widely used.

Results (English) 2:

公共开放性是与风险
海因茨基金面临的特殊挑战在保护
网络。这是由于基础的需要开放的对外姿态
和公众的相互作用。“我们需要授权和访问我们的
高管和员工公开，所以我们做的一些事情，不是最佳实践，喜欢把
电子邮件在我们的网站上每个人的地址，说：”查利理查德森，对
信息技术主任，海因茨的天赋。
此外，基金会的40名员工定期扫描文件、发送和接收
带有附件的邮件很多，内部和外部的。“文件
标有“施乐”或“PDF”通常被打开了，”理查德森说。该基金会的
工作人员还经常相互作用和股票的文件30名实习生和许多
受让人通过微软的SharePoint。该组织还举办
微软IIS / SQL服务器不是其内部网络的一部分。所有这一切都转化为
升高的风险。
理查德森是一人公司内部的IT人员负责海因茨
禀赋的用户和内容安全，和网络顺利运行。“从
硬件到软件，我处理一切，”他说。“每种技术都有
如何改善员工工作和接口与我们的受益人和在大的
社区。”
海因茨禀赋执政安全基础设施有两个思科
5510自适应安全设备（ASA）。它的核心应用，包括微软
Office 2010和格兰特与网络版制作程序。社会媒体
没有被广泛使用。