Re: CIPA Children Internet Protection Act

[Bob Bayn <bob.bayn () USU EDU>]

Our College of Education has a lab school for elementary students.  It functions as a long-waiting list charter school. 
 (We put our first son on the waiting list when he was born and he still didn't get in.)  We assign the school it's own 
subnet and it's own separate wireless space.  Both are behind a content filter that the school provided and we manage.  
It helps that the K12 service is in a well defined physical space.  We also offer our regular secure wireless in that 
space for access by staff with the appropriate login credentials.  They all understand that any student-facing access 
needs to be behind the content filter and that requirement is normally assured by the tech support staff.


Bob Bayn          (435)797-2396            IT Security Team
We will never send you email asking for your password
(never, never, never with this one exception: NEVER!)
Office of Information Technology, Utah State University
       http://tinyurl.com/bicyclists-share-kidneys-v2-0
        USU employees - join the Phirst Phish Contest
     http://it.usu.edu/security/htm/phirst-phish-contest

________________________________________
From: The EDUCAUSE Security Constituent Group Listserv [SECURITY () LISTSERV EDUCAUSE EDU] on behalf of William C. 
Moore [wcmoore () VALDOSTA EDU]
Sent: Monday, September 12, 2011 6:37 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] CIPA Children Internet Protection Act

I searched the archives and couldn't believe I didn't get a hit on this subject.  I am looking for input from a college 
or university that facilitates K12 classes on their campus.  To put my questions in context my university has taken a 
leadership role and management assistance for a charter school adjacent to our campus.  This includes assuming 
management and control of the network infrastructure (all traffic is through our network).

My questions begin with are you compliant with CIPA (Children Internet Protection Act) and if so are you only targeting 
compliance for minors on your network or a certain segment of your network.

A related question is do you continue CIPA oversight and management on portable institutional devices when they leave 
your network?  For example controls on a laptop issued to a student to carry home.


Any list or direct reply comments are most welcomed and thanks in advance.



Bill



William C. Moore II, CISSP, MEd, MLIS
Chief Information Security Officer
Division of Information Technology
Valdosta State University
Valdosta, GA 31698
Phone:(229)333-5974
Fax:  (229)245-4349