Re: EdConnect Software Anyone?

[Dan Johnson <djj4 () UWM EDU>]

Hi Vik,

Sorry for the delay... I've learned some of this from fighting with the
program the last few years myself...

Instead of trying to pass the information second-hand, here is probably
the best way to get a hold of someone with COD:
fsa.customer.support () ed gov

I am a part of the listserv (lurker) that they offer and they do respond
relatively quickly.  You will probably get an email stating they received
the question and will get back to you within 24 hours. I honestly can't
remember a time where they didn't meet that deadline on the listserv.

Also, here is a list of technical documentation...
https://www.fsadownload.ed.gov/docsStudentAidGateway.htm  Where you may
have a bit of a problem is that the software you mention handles more
transfers than just the PELL data.  You can also do FAFSA/ISIR transfers
and Direct Lending, to name a couple.  Plus, the 'suite' of products also
includes components, like the EDExpress software they mention.

Lastly, they also offer some information on their practices and the
Privacy Act.  A quick perusal on my part does not specifically address
your questions, but may help in answering future questions:
https://www.fsadownload.ed.gov/privacy.htm

Best bet, send them an email with your specific questions and mention to
them that you are beholden to MA state laws on electronic storage and
transfers.  I'm confident they will be able to get you the information you
are seeking.



Dan


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Vik Solem
Sent: Tuesday, March 17, 2009 4:14 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] EdConnect Software Anyone?

Hi Dan,

I'm concerned because I don't see specific information about the
security of the application on the web site.  Perhaps I'm missing it
on the site, but I still have questions like the folllowing.
   Is the data encrypted in transit?
   Is the data encrypted at rest?
   Can the application be run by a user who is neither a Power User
nor an Administrator of the local system?
   I was told that it uses FTP to transfer data.  Is this true?
Is there some part of the web site (perhaps I missed it) where I could
find answers to these kinds of questions?

-Vik



On Mar 17, 2009, at 16:42 , Dan Johnson wrote:

> Hi Vik,
>
> Our Financial Aid department uses this software and the client
> encrypts the connection natively.
>
> More references: https://www.fsadownload.ed.gov/index.htm
>
> Dan
>
>
> ----- Original Message -----
> From: "Vik Solem" <vik.solem () TUFTS EDU>
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Sent: Tuesday, March 17, 2009 1:40:47 PM GMT -06:00 US/Canada Central
> Subject: [SECURITY] EdConnect Software Anyone?
>
> We'd like to know if folks are having any security issues with the use
> if EdConnect software for processing PEL grants.
>
> Since we "do business" in Massachusetts (we're located in Mass.) we're
> very concerned about the new data privacy laws here, but we're also
> interested in any information that folks can share about using this
> software securely.
>
> -Vik
>
> Vik Solem,     Sr. Applications Risk Consultant
> Tufts University UIT
> 617-627-4326,     vik.solem () tufts edu

-Vik

Vik Solem,     Sr. Applications Risk Consultant
Tufts University UIT
617-627-4326,     vik.solem () tufts edu