Educause Security Discussion mailing list archives

Re: More specifics


From: "Piscitello, Frank" <frank () WCUPA EDU>
Date: Wed, 29 Oct 2003 16:48:33 -0500

At West Chester U, the campus users can file complaints with the Help
Desk, who in turn contact my office.  Depending on who the "actor" is, I
will notify Human Resources, Student Affairs, or Academic Affairs.  Once
notified, either a warning will be sent from the VP of the area, or
further investigation will be performed.  This will involve my area by
taking an image of the drive in question.  Once the image is obtained, I
analyze it to determine if materials are being collected specifically,
or possibly by accident (pop-ups).  I then write up my research and
re-submit it back to the VP/Dean as appropriate.
 
If I determine that the material may be truely illegal, I notify our
campus police, and also my contact with the State Police Computer Crime
group.  I then turn the materials over to the police (with appropriate
subpoena's filed).
 

------------------------------------------------------------------ 
Frank J. Piscitello, Jr. 
Information Security Manager    
Office of Information Security 
West Chester University of PA 
West Chester, PA 19383 
Phone: 610-436-3192 
Fax: 610-436-3110 

Security is everyone's responsibility. 



  _____  

From: Theresa Semmens [mailto:theresa.semmens () NDSU NODAK EDU] 
Sent: Wednesday, October 29, 2003 4:37 PM
To: SECURITY () LISTSERV EDUCAUSE EDU


I should have been more specific in my request.  I apologize.  Would
anyone like to share their formal procedures for dealing with network
misuse cases involving obscenity/pornography (adult, run of the mill
type)?  I would like to know how other universities handle this problem.
Thank you.
 
Theresa Semmens
NDSU IT Security Officer
North Dakota State University
Fargo, ND 58101
701.231.5870
Theresa.Semmens () ndsu nodak edu
 
This electronic mail message may contain privileged and confidential
information.  If the reader is not the intended recipient, or the
employee or agent responsible to deliver it to the intended recipient,
you are hereby notified that any use, disclosure, dissemination,
distribution, or copying of this communication and any attached files
may be strictly prohibited.  If you have received this communication in
error, please immediately notify Information Technology Services contact
by telephone at 701-231-5870, or by reply e-mail, and permanently delete
the message from your system.  Receipt by anyone other than the intended
recipient is not a waiver of any privilege or immunity. 
 
********** Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/cg/. 

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.


Current thread: