Educause Security Discussion mailing list archives
Re: Policy regarding student, HR, or other data on departmental/college servers
From: Colleen Keller <ckeller () EDUCAUSE EDU>
Date: Mon, 28 Feb 2005 13:03:05 -0700
Hi Fabian The EDUCAUSE Resource Center has a lot of unversity policies regarding access, security, and data security. On each of these topics, there is a section on the page that links to school's policies, it is under the heading of "Related Resouces". Access Policies http://www.educause.edu/Browse/645?PARENT_ID=111 Security Policies http://www.educause.edu/Browse/645?PARENT_ID=117 Privacy Policies http://www.educause.edu/Browse/645?PARENT_ID=116 Data Security http://www.educause.edu/Browse/645?PARENT_ID=586 Please let me know if you have any questions, thank you. Colleen Keller Information Specialist EDUCAUSE, 4772 Walnut Street, Suite 206 Boulder, CO 80301-2538 Phone (303) 939-0309, FAX (303) 440-0461 www.educause.edu -----Original Message----- From: The EDUCAUSE Security Discussion Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of F. L. Ferreri Sent: Monday, February 28, 2005 12:12 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Policy regarding student, HR, or other data on departmental/college servers Hello! Our university is relatively centralized in regards to housing student and administrative data. Specifically, we have the ERP system and the data base that houses our information centrally administered, behind its own firewall, and the policies and procedures in place to allow access to this data. The network design and policies/procedures were approved by both internal and external auditors. Recently, we've had one of our colleges ask for access to a subset of our centralized data base of student information. We've met with them, gotten their requirements and are in the process of giving them the access they need. Also, we're putting together a policy on how non-centralized data must be secured. While it's a little late to do this for this particular college, but we'll be ready when the next request hits our desk. Anyway, I was wondering if any of you kind folks have University-approved policies at your institution that address the security of data on departmental or college servers. Any information, documents or links to Web pages would be appreciated. Thanks in advance, Fabian - - - - - - - - - - - - - - - - - - - - - - - F. L. Ferreri Security Administrator Cleveland State University phone: 216.687-2160 fax: 216.687-9200 ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- Policy regarding student, HR, or other data on departmental/college servers F. L. Ferreri (Feb 28)
- <Possible follow-ups>
- Re: Policy regarding student, HR, or other data on departmental/college servers Colleen Keller (Feb 28)