Educause Security Discussion mailing list archives

Re: Chapel Hill researcher demoted after security breach


From: Dennis Bohn <BOHN () ADELPHI EDU>
Date: Fri, 22 Oct 2010 08:29:30 -0400

Nicole Kegler wrote:
 I would be interested in hearing your thoughts about this, and what=20
could have been done differently by the university.


It is probably foolish to keep this thread going, but it is Friday.  Advance
apologies.  

It should go without saying that there is more going on here than meets the
eye.  One article that seemed to suggest a bit more of the back story
(http://www.dailytarheel.com/index.php/article/2010/10/researcher_appeals_pay_cut_demotion#comment8947)
said:

"In the intention to discharge notice, Carney wrote that Yankaskas was
negligent in assigning security duties without granting additional training to
Melinda Boyd, whom he deemed to be underqualified. Carney later became aware
that his wife’s Social Security number was exposed and said his personal
connection to the breach has not clouded his judgment."
“At the time, Ms. Boyd had no certification or experience as a server
administrator,” Carney wrote. “She has stated that she requested that you
provide additional training for her in server administration but that you
declined to do so.”"

I found it odd that a principal investigator would be held responsible, however
we are a centralized IT shop.

dennis

   



Dennis Bohn
network manager
5168773327


Current thread: