Re: DHS Announces the Release of New Training Course: Workplace Security Awareness

[Allison F Dolan <adolan () MIT EDU>]

Ironically, Mary Ellen Callahan, DHS Chief Privacy Officer, was recently interviewed by IAPP (International Assoc of 
Privacy Professionals) touting the things they are doing.  She referenced 
http://www.dhs.gov/xabout/structure/editorial_0338.shtm

Allison Dolan

________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () listserv educause edu] On Behalf Of Walter Petruska 
[wpetruska () USFCA EDU]
Sent: Friday, April 22, 2011 3:33 PM
To: SECURITY () listserv educause edu
Subject: Re: [SECURITY] DHS Announces the Release of New Training Course: Workplace Security Awareness

Let's consider how we may respond and help to create a safer world here-

Okay- there are some problems.  Let's view our collective responses thus far as a knee-jerk reaction.  Should we gather 
our opinions into a statement and forward to the program administrators, along with recommended alternatives?

The courses themselves look pretty good- I've just had a peek into one of them. Easy to find, easy to access, free, 
relevant.

At least they HAVE created this material, and they ARE putting it out to there to a wide audience.

Let's help them to improve the program, and perhaps we can also look at their offerings, and recommend some areas which 
they have not yet covered!?

There are CEUs and some courses carry 'college credit'.  So, certainly, there are many out there who will be drawn to 
this combination of: access to relevant training, zero cost, CEUs to maintain certs, and education credit for those who 
need it (in public, private and NGO sectors).

How do others feel about providing them a formal reply with 'Thanks- nice job, however, you may wish to address the 
following issues: a, b, c; and we recommend the following topics for further development: x, y, z.

Walter Petruska CISSP, CISA, CGEIT
Information Security Officer
infosec.usfca.edu<http://infosec.usfca.edu>

University of San Francisco
Lone Mountain North - 226
2130 Fulton Street
San Francisco, CA 94117
ITS Help Desk, Phone: 415-422-6668
Security Services Fax: 415-422-6719


On Fri, Apr 22, 2011 at 12:12 PM, Sarazen, Daniel <dsarazen () umassp edu<mailto:dsarazen () umassp edu>> wrote:
Hi hear you David, but I'm more concerned about the tone this sets for those relatively uninitiated in the field of IT 
Security and risk.

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>] On Behalf Of David Escalante
Sent: Friday, April 22, 2011 3:04 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] DHS Announces the Release of New Training Course: Workplace Security Awareness


On Apr 22, 2011, at 2:47 PM, Mclaughlin, Kevin (mclaugkl) wrote:

> Unreal, just unreal.  Maybe this is their way to push for a federal identifier, you know- a group of characters that 
> will uniquely identify each .... Oh wait a minute - never mind.

To be fair, it is largely people in private industry (and even, gasp, higher ed, when "everyone" used SSN as their 
identifier some years ago) who have chosen to use knowledge of an SSN as a means of authentication for access to 
financially significant services.  As a federal identifier, it is benign.
--
David



--
Walter Petruska CISSP, CISA, CGEIT
Information Security Officer
infosec.usfca.edu<http://infosec.usfca.edu>

University of San Francisco
Lone Mountain North - 226
2130 Fulton Street
San Francisco, CA 94117
ITS Help Desk, Phone: 415-422-6668
Fax: 415-422-6719