Procedure Question

["Avitua, Louisa" <lavitua () STMARYTX EDU>]

As a new comer to the IT world holding an interim position for a while,
I am in need of understanding procedure for the following:

 

What is the requirement or responsibility of an institution when a
website has been compromised and analysis show no compromised to
personal data? Is notification to students required or recommended? 

 

Thank you for your direction.

 

 

Louisa Martin

Coordinator for Information Technology

St. Mary's University 

San Antonio, Texas 78228

(210) 431-5005  - phone

e-mail: lavitua () stmarytx edu