Educause Security Discussion mailing list archives
Re: Retiree email
From: "Scantlin, Aaron J." <ScantlinA () MISSOURI EDU>
Date: Mon, 25 Jan 2021 16:33:27 +0000
Same here, but we do require MFA for them. While our help desks have definitely had an increase in call volume over this, I would say that the vast majority of them understand the reason for the change. We do have some exceptions for certain edge cases. Aaron J. Scantlin Security Analyst, Division of IT GCFA, GNFA University of Missouri - Columbia (573) 884 - 7555 scantlina () missouri edu<mailto:scantlina () missouri edu> From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of "Fugett, Julie C" <jcf () KU EDU> Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> Date: Monday, January 25, 2021 at 10:24 AM To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU> Subject: Re: [SECURITY] Retiree email WARNING: This message has originated from an External Source. This may be a phishing expedition that can result in unauthorized access to our IT System. Please use proper judgment and caution when opening attachments, clicking links, or responding to this email. We allow retirees and emeriti faculty to keep email for life. 1. Do you keep them in your primary email system/tenant (Exchange, O365, GSuite, etc)? * Main M365 tenant 2. If you keep them in your primary system/tenant, do you require them to use MFA (assuming you require it for your active community)? * Once a person flips to retiree status, they drop out of the MFA group so it is no longer retired. I would like to change this. 3. Do you change their address, i.e. add “emeritus” or “retiree” to the email domain? * No. From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Boyd, Daniel Sent: Monday, January 25, 2021 10:19 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Retiree email For those of you who provide retirees email (if anyone else is crazy enough to do so besides us), I have some questions: 1. Do you keep them in your primary email system/tenant (Exchange, O365, GSuite, etc)? 2. If you keep them in your primary system/tenant, do you require them to use MFA (assuming you require it for your active community)? 3. Do you change their address, i.e. add “emeritus” or “retiree” to the email domain? We’re getting to the point where we are about to activate MFA on retirees and emerita and the apprehension of trying to teach some of these users how to use MFA has our support teams on pins and needles, so we’re looking for alternatives. You are welcome to reply directly to me or to the list. Thanks, Dan Daniel H. Boyd (94C) Director of Information Security Office of Information Technology Information Security Advisory Group Chair Berry College Phone: 706-236-1750 Web: https://infosec.berry.edu<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Finfosec.berry.edu%2F&data=04%7C01%7C%7C5b9a830fc14246cd17b208d8c14db079%7Ce3fefdbef7e9401ba51a355e01b05a89%7C0%7C0%7C637471886823836093%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=zb2O3%2B%2BshZReOJ0WXO3Jrgn%2FkdisoN3OsBcBWJXiaDI%3D&reserved=0> & https://berry.edu/oit/information-security<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fberry.edu%2Foit%2Finformation-security&data=04%7C01%7C%7C5b9a830fc14246cd17b208d8c14db079%7Ce3fefdbef7e9401ba51a355e01b05a89%7C0%7C0%7C637471886823846042%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=%2FrBPshCrFgZPXH0HTzHPwmHhnPEalQS99ocfYnNZ%2F6s%3D&reserved=0> There are two rules to follow concerning your account passwords: 1. NEVER SHARE YOUR PASSWORDS WITH ANYONE (EVEN OIT!!!!) 2. If unsure, consult rule #1 Information Security wants to know what you want to know about! If there is a topic within information security you would like to know more about please let me know using any of my contact information above. ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7C%7C5b9a830fc14246cd17b208d8c14db079%7Ce3fefdbef7e9401ba51a355e01b05a89%7C0%7C0%7C637471886823846042%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=t33yxnXhXaUwYMlojdLyWyXj%2FkpTwZSyvBUCemnCmfE%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7C%7C5b9a830fc14246cd17b208d8c14db079%7Ce3fefdbef7e9401ba51a355e01b05a89%7C0%7C0%7C637471886823856002%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=x4%2B2M1oDMEoHC6cQZCEoqKH1VmU6HTy43zBV2v5wEFE%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Retiree email Boyd, Daniel (Jan 25)
- Re: Retiree email Fugett, Julie C (Jan 25)
- Re: Retiree email Curt Kappenman (Jan 25)
- Re: Retiree email Mark Reboli (Jan 25)
- Re: Retiree email Telfer, Will (Jan 25)
- Re: Retiree email Kimmitt, Jonathan (Jan 25)
- Re: Retiree email Fugett, Julie C (Jan 25)
- Re: Retiree email Karen Brown (Jan 25)
- Re: Retiree email Kimmitt, Jonathan (Jan 25)
- Re: Retiree email Andy Morgan (Jan 25)
- <Possible follow-ups>
- Re: Retiree email Scantlin, Aaron J. (Jan 25)