Educause Security Discussion mailing list archives

Re: FERPA and Student Computing Accounts


From: Joel Rosenblatt <joel () COLUMBIA EDU>
Date: Thu, 30 Apr 2009 21:40:12 -0400

We have a very strict no password sharing policy - plus our passwords are stored at one way hashes and there is no way 
for us to give the password to anyone -
so I would say that in our case, the answer would be we cannot do it.

But I am curious to hear other answers on this one.

My 2 cents,
Joel Rosenblatt

Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel


--On Thursday, April 30, 2009 4:12 PM -0700 "Plesco, Todd" <tplesco () CHAPMAN EDU> wrote:

If a student has signed an "Authorization to Release Student
Information" to a parent, what are your policies concerning the
disclosure of a student's login & password to allow that parent access
to that student's electronic student records or other accounts?



Todd A. Plesco  CISM, CBCP

Chapman University, Director of Information Security

One University Drive, Orange, CA 92866

Phone: (714) 744-7979/Fax: (714) 744-7041






Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel

Current thread: