Re: Policy regarding student, HR, or other data on departmental/college servers

[Colleen Keller <ckeller () EDUCAUSE EDU>]

Hi Fabian

The EDUCAUSE Resource Center has a lot of unversity policies regarding
access, security, and data security.  On each of these topics, there is
a section on the page that links to school's policies, it is under the
heading of "Related Resouces". 

Access Policies http://www.educause.edu/Browse/645?PARENT_ID=111
Security Policies http://www.educause.edu/Browse/645?PARENT_ID=117
Privacy Policies http://www.educause.edu/Browse/645?PARENT_ID=116
Data Security http://www.educause.edu/Browse/645?PARENT_ID=586

Please let me know if you have any questions, thank you.

Colleen Keller   
Information Specialist                     
EDUCAUSE, 4772 Walnut Street, Suite 206
Boulder, CO 80301-2538
Phone (303) 939-0309, FAX (303) 440-0461 www.educause.edu
 
-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of F. L. Ferreri
Sent: Monday, February 28, 2005 12:12 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Policy regarding student, HR, or other data on
departmental/college servers

Hello!

Our university is relatively centralized in regards to housing student
and administrative data.  Specifically, we have the ERP system and the
data base that houses our information centrally administered, behind its
own firewall, and the policies and procedures in place to allow access
to this data.  The network design and policies/procedures were approved
by both internal and external auditors.

Recently, we've had one of our colleges ask for access to a subset of
our centralized data base of student information.  We've met with them,
gotten their requirements and are in the process of giving them the
access they need.  Also, we're putting together a policy on how
non-centralized data must be secured.  While it's a little late to do
this for this particular college, but we'll be ready when the next
request hits our desk.

Anyway, I was wondering if any of you kind folks have
University-approved policies at your institution that address the
security of data on departmental or college servers.  Any information,
documents or links to Web pages would be appreciated.

Thanks in advance,
Fabian

- - - - - - - - - - - - - - - - - - - - - - - F. L. Ferreri Security
Administrator Cleveland State University
phone: 216.687-2160
fax:   216.687-9200

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.