FTC and Red Flag Rule

[Anand Malwade <malwadan () SHU EDU>]

Hi,

Does anyone know if Educational Institutions are affected by the FTC's Red
flag rule about maintaining an Identity Theft program ? If yes has anyone
implemented or has a roadmap for deployment?
In my opinion if the rule is indeed applicable, the Institution's Legal
Counsel should drive the initiative and not IT.

Any suggestions are welcome.


http://www.dciginc.com/2008/08/ftc-issues-red-flag-rules-reminder-ensuring-i.html

http://www.ftc.gov/bcp/edu/pubs/business/alerts/alt050.shtm



Thanks,
Anand



Anand Malwade, CISSP,CISM,CISA.
Information Security Officer,
Seton Hall University,
malwadan () shu edu