Re: Student Workers on the Security Team?

[James Farr <jfarr () UTICA EDU>]

 <!--  /* Font Definitions */  @font-face       {font-family:"Cambria Math";    panose-1:0 0 0 0 0 0 0 0 0 0;   
mso-font-charset:1;     mso-generic-font-family:roman;  mso-font-format:other;  mso-font-pitch:variable;        
mso-font-signature:0 0 0 0 0 0;} @font-face     {font-family:Calibri;   panose-1:2 15 5 2 2 2 4 3 2 4;  
mso-font-charset:0;     mso-generic-font-family:swiss;  mso-font-pitch:variable;        mso-font-signature:-1610611985 
1073750139 0 0 159 0;}  /* Style Definitions */  p.MsoNormal, li.MsoNormal, div.MsoNormal        {mso-style-unhide:no;  
 mso-style-qformat:yes;  mso-style-parent:"";    margin:0in;     margin-bottom:.0001pt;  mso-pagination:widow-orphan;   
 font-size:12.0pt;       font-family:"Calibri","sans-serif";     mso-ascii-font-family:Calibri;  
mso-ascii-theme-font:minor-latin;       mso-fareast-font-family:"Times New Roman";      
mso-fareast-theme-font:minor-fareast;   mso-hansi-font-family:Calibri;  mso-hansi-theme-font:minor-latin;       
mso-bidi-font-family:"Times New Roman";         mso-bidi-language:EN-US;} .MsoChpDefault        
{mso-style-type:export-only;    mso-default-props:yes;  mso-ascii-font-family:Calibri;  
mso-ascii-theme-font:minor-latin;       mso-fareast-font-family:"Times New Roman";      
mso-fareast-theme-font:minor-fareast;   mso-hansi-font-family:Calibri;  mso-hansi-theme-font:minor-latin;       
mso-bidi-language:EN-US;} .MsoPapDefault        {mso-style-type:export-only;    margin-bottom:10.0pt;   
line-height:115%;} @page Section1       {size:8.5in 11.0in;     margin:1.0in 1.0in 1.0in 1.0in;         
mso-header-margin:.5in;         mso-footer-margin:.5in;         mso-paper-source:0;} div.Section1       
{page:Section1;} -->   Alex,
 
 I have looked into this, but we have not implemented any student workers yet.  I have talked to people at other 
Universities where there students do programming support (which seems just as touchy a topic), but I have not met any 
that let students on the security team.  People are understandably skeptical about using student help here.  I see a 
lot of potential for the right students.  First my plan would rely on using students identified by someone on camps who 
knows the student well and further vetting them myself including having students sign non-disclosure agreements.  
Second, we have to consider the potential of a rouge student vs. the help the majority of students will provide closing 
security gaps.  I do not have any policies in place, but I am interested in seeing what others are already doing.       
James Farr  Utica College  Information Security Officer  

----- Original Message -----
From: "Brown, Alexander" <arbrown () CAU EDU>
Date: Thursday, April 23, 2009 12:08 pm
Subject: [SECURITY] Student Workers on the Security Team?
To: SECURITY () LISTSERV EDUCAUSE EDU

      <!--  /* Font Definitions */  @font-face  {font-family:Calibri;   panose-1:2 15 5 2 2 2 4 3 2 4;}  /* Style 
Definitions */  p.MsoNormal, li.MsoNormal, div.MsoNormal      {margin:0in;    margin-bottom:.0001pt;  font-size:11.0pt; 
      font-family:"Calibri","sans-serif";} a:link, span.MsoHyperlink  {mso-style-priority:99;         color:blue;     
text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed        {mso-style-priority:99;         color:purple;   
text-decoration:underline;} span.EmailStyle17   {mso-style-type:personal-compose;       
font-family:"Calibri","sans-serif";     color:windowtext;} .MsoChpDefault       {mso-style-type:export-only;} @page 
Section1    {size:8.5in 11.0in;     margin:1.0in 1.0in 1.0in 1.0in;} div.Section1   {page:Section1;} -->       > I’m 
new to our university and I’m also new to the educational environment.  We have a VERY small security team and it would 
be nice to be able to delegate some tasks to another person.  Do any of you use students on your security teams and if 
so, what do you allow them to access/administer/manage and how much access do you give them?  Do you have them sign 
non-disclosure agreements?  Do you have any policies regarding their employment?     > Thanks for any help you can 
give.     > Alex