Re: Gmail, etc. - Forwarding Email to Personal Accounts!

[Steve Schuster <sjs74 () CORNELL EDU>]

We're also trying to think this through.  As a matter of fact, we're  
currently stepping back to try to consider what getting a more formal  
relationship with Google might mean to us -- ASU has a pretty  
compelling story with respect to their move to Google.

From my perspective, I'd rather no one use e-mail for university  
sensitive data no matter where the data sits.  We're trying to take  
some more aggressive steps to provide better protection of university  
data overall but particularly trying to ensure we don't use mail for  
such information.  If we were to be successful then I wouldn't care  
where the mail flies.  I know for a fact, however, that we will never  
be completely successful here so I'm left asking, if we were to enter  
into an agreement with Google, MSN or some other such company who has  
more security resources, who has more to lose and who has the better  
security.

Good luck,
sjs

Steve Schuster
Director, IT Security Office
Cornell University
sjs74 () cornell edu




On Nov 8, 2006, at 3:02 PM, Sadler, Connie wrote:

> Hi, all… we have more and more people (faculty and staff as well as  
> students) who want to forward their work-related messages, as well  
> as their personal messages, to one central email account, usually  
> gmail. Obviously, I am concerned about having potentially sensitive  
> university email content sitting on a gmail server. What are you  
> folks doing to manage these sorts of requests? Are you preventing  
> staff or faculty from doing this? If so, how has that worked? We  
> are rapidly moving toward expectations people have of having all of  
> their messaging funneled to one place, and while this is certainly  
> convenient, I'm quite concerned about how we can ensure a  
> reasonable level of security.
>
> Thanks -
>
> Connie J. Sadler, CM, CISSP, CISM, GIAC GSLC
> IT Security Officer
> Brown University Box 1885, Providence, RI 02912
> Connie_Sadler () Brown edu
> Office: 401-863-7266
> PGP Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x91E38EFB
> PGP Fingerprint: DA5F ED84 06D7 1635 4BC7 560D 9A07 80BA 91E3 8EFB