Re: ID Cards

["Jones, Mark B" <Mark.B.Jones () UTH TMC EDU>]

In my opinion it is a mistake to consider anything printed on ID cards as
private (or worse, secret).

 

There are too many legitimate needs for access to and to exchange
student/employee IDs for them to be used to prove identity.  They are not
secret.

 

There are likely easier ways to get this student's ID than passing by that
window display.  If you can do something malicious with it, it should not be
printed on your ID card or you should put processes in place to protect
against the malicious 'thing'.

 

From: The EDUCAUSE Security Community Group Listserv
<SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Garrett McManaway
Sent: Monday, January 6, 2020 12:35 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] ID Cards

 

**** EXTERNAL EMAIL ****

Hello,

 

We recently had an issue come up where a med student was photographed where
his student ID on his lab coat. That image was blown up larger than life and
used by our marketing team in the window of our bookstore, which happens to
face two busy public streets. As a result I have gotten a few questions on
allowing the ID card to be used as a badge for physical identification.  

 

Does anyone have a policy around using school issued ID cards as badges for
identification? In particular, for Medical School students working in
clinical practices? 

 

We have a OneCard system, where the card contains a photo and other
information including the student/employee ID. The ID is meant to be private
and could be used for a number of malicious things, including validation of
identity through our help desk.

 

As a side note we do not have our own hospital system so we do not issue any
other type of badge to use for identity but rely on the partner institution
to do so, but we believe in some cases the students are also displaying
their WSU OneCard as well.

 

Garrett McManaway

CISO & Sr. Director 

C&IT - Information Security and Compliance

Wayne State University 

Phone: 313-577-3454

 

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community
list. If you want to reply only to the person who sent the message, copy and
paste their email address and forward the email reply. Additional
participation and subscription information can be found at
https://www.educause.edu/community
<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_commu
nity&d=DwMFAg&c=bKRySV-ouEg_AT-w2QWsTdd9X__KYh9Eq2fdmQDVZgw&r=Lgw4Sh6g47kM5A
_tpEcLZDyPGvmOKdeDlyp60PwA78c&m=GV5PsXD6UvZsN71Rd3W3FPuIG6Ainw1JRUvxpo4jRyk&
s=APcRvANQmXdD30YycYVh_drxX-ezFMECK9nGCANBsNE&e=>  


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Attachment: smime.p7s
Description: