Educause Security Discussion mailing list archives

Re: Tableau Public Online Dashboards


From: Brad Judy <brad.judy () CU EDU>
Date: Mon, 19 Jul 2021 21:52:06 +0000

My rule for Tableau Public is that the raw data must be fully public in nature (which is the entire point of the 
Tableau Public offering). It’s a neat tool and we have some groups using it for non-PII data.

I absolutely do not trust the service for any non-public data. Tableau themselves says not to use it for non-public 
data.

Brad Judy

Information Security Officer
Office of Information Security
University of Colorado
1800 Grant Street, Suite 300
Denver, CO  80203
Office: (303) 860-4293
Fax: (303) 860-4302
www.cu.edu<http://www.cu.edu/>

[cu-logo_fl]


From: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of "Kimmitt, Jonathan" <jonathan-kimmitt () 
UTULSA EDU>
Reply-To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Monday, July 19, 2021 at 2:11 PM
To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Tableau Public Online Dashboards

Hi all,

 During a recent conversation with our IR team about sending our student data to Tableau Online to present dashboards 
publicly, a question came up on how other Universities are presenting the data.

For those that do send data to Tableau online for public reports/dashboards, do you anonymize the data before you send 
to Tableau, or do you send raw student data, then trust the dashboards to not allow access to FERPA information?

Due to the sensitivity of the data, please feel free to respond directly instead on the open forum…

Thanks!

-Jonathan





~
Jonathan Kimmitt
CISSP, FIP, CDPSE, CIPP/E, CIPM, CIPT,
OTCP, GLEG, GPEN, GSNA, PCIP, CEH
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743
Jonathan-kimmitt () utulsa edu

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: