Re: Do you use Email encryption software?

["Miller, Don C." <donm () UIDAHO EDU>]

We have tried a number of encryption products, the best for e-mail is
s/mime as it can easily integrate into a number of e-mail clients
natively.  But, our CSO has taken the stance that *no* sensitive
information can be stored on local systems and should be avoided going
through e-mail (and the potential for local storage).  Only links to
secure web pages should be used, especially now that we outsource
student e-mail services.

Don Miller
University of Idaho

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Fusco, David
(FUSCO)
Sent: Friday, January 16, 2009 4:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Do you use Email encryption software?

Hello -

We are investigating the expanded use of email encryption software on
our campus and wondered how many others use a solution for this.  We do
have several copies of PGP for the transfer or some sensitive
information, but how far do you take it?  Should every email from a
faculty member to a student that has a grade in it be encrypted?  I
would think that most institutions do not use encryption for this type
of process, but how far have you taken it?  We are considering it for
the encryption of obvious messages, such as financial data, health data,
etc.

Thanks in advance,
Dave.

David J. Fusco
Associate Vice President and CIO
Assistant Professor of Information Technology
Juniata College
1700 Moore Street
Huntingdon, PA  16652
814.641.3684
814.641.3703 (fax)
http://faculty.juniata.edu/fusco