Re: Google Analytics

["Sweeny, Jonny" <jsweeny () IU EDU>]

Theresa,

To date we've not approved the use of Google Analytics.  We understand its merits, however, and continue to evaluate 
the situation.  Here is our typical response when units ask about Google Analytics (or if we detect them using it):


The information collected by Google Analytics amounts to sharing server site stats in real time with a commercial 
company
that acknowledges its intent to share it with commercial partners. It does appear that Google maintains the raw,
un-sanitized, data.

The sharing of information does not fit within the Indiana University Online Privacy Statement
(http://www.indiana.edu/~itpo/OLPS.htm), as it is not approved under the "Disclosure of Information" section. However, a
web site *could* collect more information using something such as Google Analytics, as long as they can ensure the
individual using the site is aware and approves. They couldn't offer a service that folks *need* to do for their work or
study at IU, however, without offering the option to do the task *without* this kind of monitoring and release of the 
info.

We have not yet approved any requests to utilize Google Analytics.


--
~Jonny Sweeny, GSEC, GCWN, GCIH, GWAS, SSP-CNSA
Incident Response Manager, Lead Security Analyst
Office of the VP for Information Technology, Indiana University
PGP key & S/MIME cert: http://informationpolicy.iu.edu/jsweeny
jsweeny () iu edu - phone: (812)855-4194 - fax: (812)856-1011





-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Theresa 
Semmens
Sent: Wednesday, January 07, 2009 13:11
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Google Analytics

Hello everyone,
I have a division on campus that would like to use Google Analytics to track
their Web site activity.  Do any of you use this service?  For those of you
who do collect web stats and use a commercial application, what application
do you use, is the cost reasonable, and what do you like about it. 

I want to discourage them from using Google, so if any of you can give me a
reasonable argument as to why they should use it, please do so - the
argument of "free" doesn't count.  I'll also welcome arguments against
Google analytics and stories if any of you have had any bad experiences.  

You can reply to me offline if you like.

Thanks,

Theresa

Theresa Semmens, CISA
NDSU IT Security Officer
PO Box 6050
North Dakota State University
Fargo, ND 58108
Phone: 701-231-5870
FAX: 701-231-8541
Theresa.Semmens () ndsu edu

Everybody is a genius. But if you judge a fish by its ability to climb a
tree, it will live its whole life believing that it is stupid. 
-Albert Einstein