Re: Chapel Hill researcher demoted after security breach

["Plesco, Todd" <tplesco () CHAPMAN EDU>]

I couldn't really offer an educated opinion without knowing more details of the research grant itself and the actions 
leading up to the Provost's comments.  It seems that with an IRB's involvement, there should have been a Compliance or 
Privacy Officer's involvement somewhere in that IRB panel or on the sidelines...

Todd A. Plesco  CISM, CBCP
Chapman University, Director of Information Security
One University Drive, Orange, CA 92866
Phone: (714) 997-6726/Fax: (714) 744-7041


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Nicole 
Kegler
Sent: Thursday, October 07, 2010 11:47 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Chapel Hill researcher demoted after security breach

  Has anyone been keeping up with this story about the Chapel Hill 
researcher who was demoted after her server, which contained PII, was 
hacked?

http://chronicle.com/article/Chapel-Hill-Researcher-Fights/124821/?key=SmN7cgVsO3RHZ3pqYjgRMDwBP3xsYhh7YHVJOXB6bl9TGQ%3D%3D
 


  I would be interested in hearing your thoughts about this, and what 
could have been done differently by the university.

-- 
Nicole Kegler
Communications Manager
University Information Security Office
Georgetown University
202-687-5784

Protecting data is a shared responsibility!

INSTALL antivirus and antispyware software.
USE strong passwords.
KNOW who you are dealing with online.
STORE confidential and sensitive data on encrypted devices only.
SHUT DOWN computers or disconnect from the Internet when it's not in use.