Re: Do students hold universities accountable for protecting their information?

[Curt Kappenman <ckappenman () ANDERSONUNIVERSITY EDU>]

Keith McIntosh originated this discussion with this question: "Do students hold universities accountable for protecting 
their information?"

I have read the feedback from many colleagues and I agree in principle with all.  I think the simple answer to the 
question posed is "Yes."  Our students have the conception (whether rightly or wrongly) that while they are associated 
with our institution, we are protecting them and their data.  Some of us have, because of our charters and 
institutional policies, the ability to filter what access our students have to the internet; while some have to allow 
their students access to whatever comes.

For many years this "condition" has existed and we have learned to just deal with it.  I think that because of the 
changing landscapes of the digital world and the importance that data is playing in or everyday lives, we as IT 
professionals are going to need to re-evaluate where we need to stand.  As more focus falls on the misuse of someone's 
data, the more focus will be drawn to our policies and procedures.

I know that we are all seeking to provide all the protection we can for our constituent's data.  We need to just be 
diligent and continue:

1.       to pursue the best protection for our user's data that we can provide.

2.       to seek to educate our user's in how they can help us protect themselves and their friends.

3.       To regularly re-evaluate our policies and procedures to keep in step with the changing landscape.
Our protection from extensive and costly litigation may very well rise and fall on what we are doing not just how we 
are doing it.

Curt Kappenman
Security Compliance Officer
Anderson University
Anderson, SC  29621
Office: 864.231.2850

From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of McIntosh, Keith
Sent: Monday, June 11, 2018 10:07 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Do students hold universities accountable for protecting their information?

Colleagues,

Someone recently asked me the following question and I wondered what you would say.   I believe students and parents 
have reasonable expectations that we are both protecting their information and ensuring privacy.

  Do students hold universities accountable for protecting their information?


Keith W. "Mac" McIntosh
he/his/him<https://www.mypronouns.org/>
Vice President and Chief Information Officer
Information Services

Jepson Hall G-12
28 Westhampton Way
University of Richmond, VA 23173
Office: 804.289.8771
Fax: 804.289.8988
http://is.richmond.edu<http://is.richmond.edu/>

Email: kmcintosh () richmond edu
Twitter: @<https://twitter.com/Keith_McIntosh>Keith_McIntosh<https://twitter.com/Keith_McIntosh>