Educause Security Discussion mailing list archives

Re: Identity Protection Services


From: "Mark S. Bruhn" <mbruhn () INDIANA EDU>
Date: Wed, 16 Aug 2006 08:27:37 -0400

Not sure exactly what you're looking for, but if you haven't already seen
this, perhaps this will help:

http://www.educause.edu/DataIncidentNotificationToolkit/9320

M.




--
Mark S. Bruhn

Associate Vice President for Telecommunications
Executive Director, REN-ISAC (http://ren-isac.net)
Indiana University



From: Chris Green <cmgreen () UAB EDU>
Reply-To: The EDUCAUSE Security Discussion Group Listserv
<SECURITY () LISTSERV EDUCAUSE EDU>
Date: Tue, 15 Aug 2006 14:29:29 -0400
To: <SECURITY () LISTSERV EDUCAUSE EDU>
Conversation: Identity Protection Services
Subject: [SECURITY] Identity Protection Services

We've all heard or lived one of the following situations:

 * X records taken;
 * Institution notifies X consumers with what happened letter
 * Institution may or may not include some sort of credit watch service to
help mitigate the effects of the incident.

Has anyone evaluated vendors in this space or written up what to look for?
This is one of those things that you need to setup before an incident but if
you're not being affected by identity theft, it's hard to evaluate the
product.
--
Chris Green
UAB Data Security, 5-0842

Current thread: