Educause Security Discussion mailing list archives

Re: EdConnect Software Anyone?


From: Vik Solem <vik.solem () TUFTS EDU>
Date: Tue, 17 Mar 2009 17:14:02 -0400

Hi Dan,

I'm concerned because I don't see specific information about the
security of the application on the web site.  Perhaps I'm missing it
on the site, but I still have questions like the folllowing.
  Is the data encrypted in transit?
  Is the data encrypted at rest?
  Can the application be run by a user who is neither a Power User
nor an Administrator of the local system?
  I was told that it uses FTP to transfer data.  Is this true?
Is there some part of the web site (perhaps I missed it) where I could
find answers to these kinds of questions?

-Vik



On Mar 17, 2009, at 16:42 , Dan Johnson wrote:

Hi Vik,

Our Financial Aid department uses this software and the client
encrypts the connection natively.

More references: https://www.fsadownload.ed.gov/index.htm

Dan


----- Original Message -----
From: "Vik Solem" <vik.solem () TUFTS EDU>
To: SECURITY () LISTSERV EDUCAUSE EDU
Sent: Tuesday, March 17, 2009 1:40:47 PM GMT -06:00 US/Canada Central
Subject: [SECURITY] EdConnect Software Anyone?

We'd like to know if folks are having any security issues with the use
if EdConnect software for processing PEL grants.

Since we "do business" in Massachusetts (we're located in Mass.) we're
very concerned about the new data privacy laws here, but we're also
interested in any information that folks can share about using this
software securely.

-Vik

Vik Solem,     Sr. Applications Risk Consultant
Tufts University UIT
617-627-4326,     vik.solem () tufts edu

-Vik

Vik Solem,     Sr. Applications Risk Consultant
Tufts University UIT
617-627-4326,     vik.solem () tufts edu

Current thread: