Re: Who are you training

["Harris, Brent" <BHarris () UMHB EDU>]

We've required everyone who has an administrative email address (not students) to complete information security 
awareness training. This includes adjuncts, emeriti, food service and cleaning contractors who have accounts, graduate 
assistants . . .

In my opinion, anyone who has an account is a point of vulnerability but it added work to corral these extra personnel.

Brent Harris
Vice President for Information Technology
University of Mary Hardin-Baylor

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Nathan 
A. Stuart
Sent: Tuesday, March 6, 2018 9:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Who are you training

For security training for things like GLBA compliance, who are you training?  Do all employees get it? If so, how do 
you define all?  If not, how do you determine who doesn't need it?

Nathan Stuart
Associate Director of Information Technology
612.343.4754 | 
northcentral.edu<https://linkprotect.cudasvc.com/url?a=http://northcentral.edu/&c=E,1,LT-ybiZ2TfY8oLP_wBq6Ypuu3ERA13YwtHbpjvXqxPaWNBq1chqYGmNJfBPjbP8ZtWZoYGBiD0VkeZ61VMQKKbb8C06Z8TUuvbD1KSYiOewSxg,,&typo=1>
910 Elliot Ave., Mpls, MN 55404