Educause Security Discussion mailing list archives

Re: Opinions on Grammerly


From: Jamie Schademan <Jamie.Schademan () CWU EDU>
Date: Mon, 7 Sep 2020 22:02:29 +0000

Hi,
We just started using the HECVAT around the first of this year.  We have found that it has made assessments much easier 
and consistent.  So far most vendors have heard of it already and filled one out before.

Jamie


Jamie Schademan
CISM, MS-IT, MS-CS
Chief Information Security Officer
Information Security Services
Central Washington University
Jamie.Schademan () cwu edu



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Ruth Ginzberg
Sent: Monday, September 7, 2020 11:12 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Opinions on Grammerly

Caution: This email originated from outside the university.
Do not click on links, open attachments, or reply unless you recognize the sender and know the content is safe. If you 
consider this email as phishing or spam please use the Report Message 
Button<https://cwu.teamdynamix.com/TDClient/2015/Portal/KB/ArticleDet?ID=78311> in Outlook to inform both the CWU 
Service Desk and Microsoft.



We ask vendors to supply it when we are evaluating whether or not their product meets our information security 
requirements.

Several years ago we would get responses like, "Huh?  What's that?"

But now we never need to explain what it is any more. They can Google it if they need to figure it out.

My experience is that many vendors already have one filled out & ready to send you if you ask for it.

RuthG

Sent from Mail<https://go.microsoft.com/fwlink/?LinkId=550986> for Windows 10

From: Curt Kappenman<mailto:ckappenman () ANDERSONUNIVERSITY EDU>
Sent: Monday, September 7, 2020 12:42 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Opinions on Grammerly


*External Email: Use caution responding, opening attachments, or clicking on links.*
Not at this time.  Something that we are working toward.  If there is a HECVAT for Grammerly, it would probably go a 
long way to prove or disprove its usage.
Curt

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Ruth Ginzberg
Sent: Monday, September 7, 2020 12:14 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Opinions on Grammerly

Do you use the HECVAT to help with your vendor assessments?

https://library.educause.edu/resources/2020/4/higher-education-community-vendor-assessment-toolkit

Ruth Ginzberg
Sr. I.T. Procurement Specialist
780 Regent Street
Madison, WI 53715
608-890-3961 | wisconsin.edu<https://www.wisconsin.edu/>

[UW System Logo]
[All In Wisconsin]
[cid:image003.png@01D68527.E8632A00]<https://twitter.com/uwsystem>
[cid:image004.png@01D68527.E8632A00]<https://www.facebook.com/uwsystem>


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Curt Kappenman
Sent: Monday, September 7, 2020 11:08 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Opinions on Grammerly


*External Email: Use caution responding, opening attachments, or clicking on links.*
All,
   I have recently been asked to evaluate Grammerly for usage on University computers.  I have seen where there have 
been issues in the past with data security but they do not seem to be re-occurring.  The question has been raised  
about password security and disclosure of other sensitive info.  Grammerly's terms of service and privacy statements 
put the security of this information in the users hands.

   While I do not want to be the bad guy (but I will if I need to be), I also do not want to make this decision in my 
own private bubble.  I would greatly appreciate the communities input on this subject.

Curt Kappenman
Security Compliance Officer / Systems Technician

316 Boulevard, Anderson, SC 29621
Phone: (864) 231-2850
Help Desk: (864) 231-2457
ckappenman () andersonuniversity edu<mailto:ckappenman () andersonuniversity edu>
www.andersonuniversity.edu<http://www.andersonuniversity.edu/>



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: