Educause Security Discussion mailing list archives

Re: Information on Public website


From: "Moore, Frank" <moorefx () LONGWOOD EDU>
Date: Mon, 23 Nov 2009 15:05:44 -0500

Faculty and staff information is available on our web site. In addition, because we are a public institution in the 
Commonwealth and an executive branch agency, faculty/staff information is also available on the Commonwealth of 
Virginia's portal.

Frank

F. X. Moore III, Ph.D.
Vice President-CIO and Chief Privacy Officer
Longwood University
201 High Street
Farmville, VA 23909

[voice] 434.395.2034
[fax]   434.395.2035

moorefx () longwood edu
http://www.longwood.edu

IITS will never ask for your password in an email.
Don't ever email your password to anyone!


On 11/23/09 2:52 PM, "Greg Schaffer" <schaffer () MTSU EDU> wrote:

At some point there has to be some method for persons/entities outside a
university to contact persons within.  I don't really see any problem with
the publication of directory information such as this.  Remember that
Accessibility is also an important part of information security...

Greg

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Anand S Malwade
Sent: Monday, November 23, 2009 1:48 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Information on Public website

I was curious to know what other Institution's policy is regarding
publishing Administrative Staff and faculty information on the University's
Public website. The information includes Name, Title, Phone #, Location and
Division.

I my opinion this should be placed behind an authenticated portal as it
maybe be used for Social engineering attacks. Does anyone see potential
privacy concerns ? Any other opinions ?

Thanks

Anand

Seton Hall University.






Current thread: