Re: Anyone Using Slate CRM?

[Victoria Gabbai <vgabbai1 () JHU EDU>]

We do, but I haven't done a full audit on it.  Could you point me in the direction of the HECVAT? I can't seem to find 
it on https://www.ren-isac.net/hecvat/cbi.html (maybe this is the wrong site for it?)

Thanks,
Vicky

Victoria Gabbai cisa, M.Sc. | Sr. Information Technology Auditor
443-997-3117 (W)  |  443-997-6399  (F)  |  X73117  |  vgabbai1 () jhu edu<mailto:vgabbai1 () jhu edu>
[cid:image001.png@01D27557.3BF1C2B0]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Travis, Andrew
Sent: Thursday, January 9, 2020 9:58 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Anyone Using Slate CRM?

We are looking at migrating to Slate for our student CRM and I was curious if anyone else on this list is using Slate 
at your school?  We've received the HECVAT and AWS SOC2 report, but the HECVAT noted that they have no CISO, security 
engineers, security analysts or security operations center.  Technolutions (the creators of Slate) confirmed their CIO 
is their security team.  My concern is that they don't have anyone reviewing security events to detect data breaches or 
system compromises.  Since we are evaluating using Slate to store highly sensitive data such as SSNs and Driver's 
License numbers, I'm hesitant to approve purchasing their product.  I'm curious how any of you all would have mitigated 
that risk if you use Slate.

Thanks for your help!



Andrew Travis

Information Security Officer

Radford University

radford.edu/it-security<https://www.radford.edu/it-security>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community