CISO EAO team details
The Chief Information Security Officer Executive Administration Office (CISO EAO)
Past projects
EPP-SentinelOne (EPP-S1) project As part of our continued efforts to
7. Are there any privacy agreements being issued for the Vigilance service?
As Vigilance’s view of U of T’s data remains the
6. With the action feature enabled, can Vigilance/the vendor now access information from U of T’s data repository?
Vigilance’s view of U of T’s data remains the same.
5. Will units be able to opt out of the action feature?
No, units won’t be able to opt out as the
4. Does activating the “action” feature of the Vigilance service mean that all devices within U of T are being moved to protect mode?
No, the detect vs. protect mode policies will remain, as
3. Does the action of disconnecting the devices occur before any discussion and concurrence with the unit?
Only in urgent, high-priority breach cases that require aggressive action.
2. How would the unit be notified when a malicious alert is classified as an urgent alert that necessitates device disconnection?
Information Security will notify the unit through their designated incident
1. What would qualify a “malicious” alert as an “urgent” alert?
Malicious alerts are considered urgent when they require security administrators’
10. What operating systems does S1 support? (e.g., Linux, macOS, Windows)?
For the latest list of supported operating systems, refer to
