Re: Locating Personally Identifiable Information

[Theresa Semmens <theresa.semmens () NDSU EDU>]

Elaine,
We are in the planning stages of a project such as you are planning to do.
Do you have a policy and procedure in place that will support the project?
We are starting with a policy and procedure, and will then follow with the
audit process to locate the confidential information.

Theresa Semmens, CISA
NDSU IT Security Officer
PO Box 5164
North Dakota State University
Fargo, ND
Phone: 701-231-5870
FAX: 701-231-8541
Theresa.Semmens () ndsu edu

"Opportunity is missed by most people because it is dressed in overalls and
looks like work."  Thomas Edison

-----Original Message-----
From: David, Elaine [mailto:elaine.david () UCONN EDU]
Sent: Tuesday, February 12, 2008 9:51 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Locating Personally Identifiable Information

At the University of Connecticut we are looking to deploy software for
locating personally identifiable information such as social security
numbers, credit card numbers, etc. in our efforts to help us manage and
protect sensitive data.

We have identified several products that we have tested for
functionality, among them: Cornell's Spider Forensic Tool, Velosecure's
Identity Finder, and Proventsure's Self PII Detection.

I am interested in learning whether other institutions have implemented
a tool for identifying/locating sensitive information, and if so:
(1) Which tool are they using?
(2) How is the tool being deployed? E.g. Do you just make it available
for use by your staff? Do you have support staff who run the tool for
individuals who request it or can individuals run it themselves?  Is it
mandatory or voluntary to use the tool?
(3) Any other information that might be useful.

Thank you in advance for any information that you can provide to us.

- Elaine

Elaine David
Assistant Vice President for Information Services
Director of Information Technology Security, Policy & Quality Assurance
University of Connecticut
Storrs, Connecticut 06269-3138
Phone: (860) 486-1362
Fax: (860) 486-5744
Email: Elaine.David () uconn edu



CONFIDENTIALITY NOTICE: If you have received this e-mail in error,
please immediately notify the sender by e-mail at the address shown and
delete all copies of this message. This e-mail transmission may contain
information that is proprietary, privileged, confidential, or otherwise
legally exempt from disclosure. If you are not the named addressee,
please be aware that you are not authorized to open, read, print,
retain, copy, or disseminate this message or any part of it. Thank you
for your compliance.