Educause Security Discussion mailing list archives

Re: Background Checks in Higher Ed?


From: "Murphy, James" <JCMurphy () UNCH UNC EDU>
Date: Wed, 23 Jun 2004 09:49:40 -0400

Our organization - academic health care system - requires a background check
of all employees upon being hired.  In the actual practice, at the offer of
the position, the background check is made with the awareness of the
individual.  If discrepancies occur, depending upon the circumstances, the
position offer may be revoked.

Some of this is based on, at least in part, the section of HIPAA Security
(Administrative Safeguards:Workforce Security:Workforce Clearance
Procedures)"Implement procedures to determine that the access of a workforce
member to electronic protected health information is appropriate".

DISCLAIMER:  The above is my own interpretation of the organizational
policies and practices and does not constitute the final word (though this
is the area within which I have been working!!).

Cheers,

Jim

James C. Murphy, MSIS, CISSP, GSEC
Information Security Analyst
UNC Health Care System
211 Friday Center Drive, Suite 2091
Chapel Hill, NC 27517
ph: 919.843.0358  fx: 919.966.1053
jcmurphy () unch unc edu



-----Original Message-----
From: Drews, Jane E [mailto:jane-drews () UIOWA EDU]
Sent: Wednesday, June 23, 2004 9:31 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Background Checks in Higher Ed?


Connie,
We are now doing criminal background checks on final candidates for
central IT positions meeting certain criteria. We also do credential
checks and reference checks for all positions. Here is a link to the
supporting policy doc
http://cio.uiowa.edu/hr/Documents/Background%20Check%20Policy.pdf   and
also to the authorization form we use
http://cio.uiowa.edu/hr/Documents/BGCauthorizationform.pdf  The program
was officially adopted after a one year pilot.  (I noticed that HR has
not changed the policy to indicate its no longer a pilot.)  This program
was piloted and subsequently implemented due to a *strong*
recommendation after 9/11 to do so by our state auditors.  Some other
high-risk units as well as our hospital are also doing criminal
background checks.

**********************************************
Jane Drews, CISSP
Information Technology Security Officer
CIO Office, The University of Iowa
320-A University Services Building
jane-drews () uiowa edu / 319-335-6332
**********************************************


-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Sadler, Connie
Sent: Wednesday, June 23, 2004 7:14 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Background Checks in Higher Ed?

Hi...

I heard recently that some institutions of higher ed are now beginning
to institute background checks for some staff and faculty. Does anyone
do this - or know who does? I hear that some institutions do simple
checks (financial and criminal) for their security personnel and sys
admins (in key positions) and some do simple screens for their faculty
and staff. Coming from an industry background, I have seen this done in
aerospace and financial sectors (and some in health care), but not in
education. If anyone is doing this, I'd appreciate hearing from you.

Thanks.

Connie J. Sadler, CM, CISSP, CISM
Director, IT Security, Brown University
Box 1885, Providence, RI 02912
Connie_Sadler () Brown edu
Office: 401-863-7266
PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB
PGP Fingerprint: DA5F ED84 06D7 1635 4BC7  560D 9A07 80BA 91E3 8EFB

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: