Re: Retiree Email Accounts

[Theresa Rowe <rowe () OAKLAND EDU>]

We audit annually by sending a notice 3 times and a response is required.
We don’t tell anyone except the owner that the account is closed. If the
record in Banner is marked deceased, the account is deleted in 24-48 hours.

On Thu, Sep 6, 2018 at 8:38 AM Frank Barton <bartonf () husson edu> wrote:

> For those of you that allow emeritus faculty members to maintain their
> accounts: How often do you "audit" the accounts to make sure that they are
> still active, the owner isn't deceased, the owner is still in good standing
> to maintain the account, etc? and what department on campus "owns" the
> relationship with the emeritus faculty member? (Who do you expect to tell
> you when the account should be closed?)
>
> Thank You
> Frank
>
> On Thu, Sep 6, 2018 at 8:30 AM Scott Stoops <sstoops () ashland edu> wrote:
>
> > We take the same view. Retirees are a termination and lose access to
> > there accounts. We will allow an emeritus faculty member to retain their
> > accounts but they have to get approval first.
> >
> > --------------------------------------------------------------------------------------------------
> > Scott Stoops
> > Security Analyst II
> > Office of Information Technology | 100 Patterson Technology Center
> > Ashland, OH 44805
> > (w) 419-289-5405
> > sstoops () ashland edu
> >
> >
> >
> > On Wed, Sep 5, 2018 at 5:32 PM Ronald King <ronald.king () morgan edu>
> > wrote:
> >
> > > Disable within 24 hours with the exception of Emeriti as well. Similar
> > > reasons as stated above.
> > >
> > > Ron
> > > *Ronald A. King, CISSP*
> > > Chief Information Security Officer
> > > Morgan State University Office: (443) 885-3372
> > > 1700 E. Cold Spring Ln
> > > <https://maps.google.com/?q=1700+E.+Cold+Spring+Ln&entry=gmail&source=g>
> > > . Email: ronald.king () morgan edu
> > > Baltimore, MD 21251 URL: http://www.morgan.edu
> > >
> > > *Growing the future ... Leading the world*
> > > <http://www.morgan.edu/Documents/ABOUT/StrategicPlan/StrategicPlan2011-21_Final.pdf>
> > >
> > >
> > >
> > > On Wed, Aug 29, 2018 at 4:40 PM Theresa Rowe <rowe () oakland edu> wrote:
> > >
> > > > Yes we have that same very limited exception for emeritus standing.
> > > >
> > > > Theresa Rowe
> > > >
> > > > On Wed, Aug 29, 2018 at 3:36 PM Miller, Richard H <rick () bcm edu> wrote:
> > > >
> > > > > BCM considers retirement to be a form of termination. Per our policy,
> > > > > e-mail along with all other is deactivated upon the date of retirement. The
> > > > >
> > > > > exception is emeritus status for a faculty member. An emeritus is
> > > > > considered to still be active so access is not terminated
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Richard H. Miller, CISSP, IEEE(SM)
> > > > > Network Security Architect
> > > > > IT-Network Engineering & Security, Baylor College of Medicine
> > > > > Need Help?  l  Have a Question?  l  Provide Feedback?  l  Visit the IT
> > > > > Service Portal @ https://it.bcm.edu
> > > > > <https://urldefense.proofpoint.com/v2/url?u=https-3A__it.bcm.edu_&d=DwMFaQ&c=0CCt47_3RbNABITTvFzZbA&r=hF9utfnfkGfY793x81M4Gr0nwxs9KYTZ6TUPUh4wPjs&m=VHGhfYTh8VaY86rLzoCLLTe0fHQs96GPZlQ0IvI1d1U&s=RDAdvYum_MpudFEYI-7sBkdhGu7hayjW5x4SiuI1lcU&e=>
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > *From:* The EDUCAUSE Security Constituent Group Listserv <
> > > > > SECURITY () LISTSERV EDUCAUSE EDU> *On Behalf Of *Williams, David
> > > > > *Sent:* Wednesday, August 29, 2018 12:18 PM
> > > > > *To:* SECURITY () LISTSERV EDUCAUSE EDU
> > > > > *Subject:* [SECURITY] Retiree Email Accounts
> > > > >
> > > > >
> > > > >
> > > > > ****CAUTION:*** This email is not from a BCM Source. Only click links
> > > > > or open attachments you know are safe.*
> > > > > ------------------------------
> > > > >
> > > > >
> > > > >
> > > > > How does your institution address email accounts for retirees?
> > > > >
> > > > > ·         Deactivate upon termination?
> > > > >
> > > > > ·         Continuous use of email account?
> > > > >
> > > > > ·         Move email account to  separate domain (e.g.,
> > > > > John.Doe () retiree dcccd edu)?  What about retention of email upon
> > > > > retirement?
> > > > >
> > > > > ·         Other?
> > > > >
> > > > >
> > > > >
> > > > > Retirees at our institution are allowed to maintain their email
> > > > > accounts.  I have given good cause for removing this entitlement from a
> > > > > security exposure and support perspective, but, have been requested to
> > > > > solicit comments from other education institutions.
> > > > >
> > > > >
> > > > >
> > > > > Thank you for any feedback!
> > > > --
> > > > Theresa Rowe on the road
>
> --
> Frank Barton, MBA
> Security+, ACMT, MCP
> IT Systems Administrator
> Husson University
-- 
Theresa Rowe on the road