Educause Security Discussion mailing list archives

Separation of University and personal records at termination


From: "Mayne, Jim" <J.Mayne () TCU EDU>
Date: Thu, 15 Feb 2007 10:59:11 -0600

Many universities have an employee termination or separation checklist
that says something to the effect that terminated employees need to
retrieve their personal email and files before leaving. Some say things
like a supervisor should work with an employee to review email and files
in order to separate university business related records and documents
from personal ones.

This sounds good but how is this accomplished when there may be hundreds
of megabytes or more of email and gigabytes of files to be separated?
Perhaps the employee was even terminated due to the misuse of sensitive
documents and the process has to be meticulously supervised. Can a
university always afford to devote the necessary time and resources to
this? On the other hand if not then the policy is not being consistently
enforced.

Any thoughts, observations or actual procedures would be welcome.

Jim

Jim Mayne
Director, Information Security Services
Texas Christian University
j.mayne () tcu edu
(817) 257-6843

Current thread: