Educause Security Discussion mailing list archives

Re: Login/Logoff Activity


From: Will Froning <will.froning () GMAIL COM>
Date: Thu, 25 Apr 2013 07:23:35 +0400

Hello All,

On Thu, Apr 25, 2013 at 3:27 AM, Harry Hoffman <hhoffman () ip-solutions net>wrote:

Nah, this just means that Joe has outsourced his job for a quarter of
his pay and browses reddit and 4chan all day long ;-)

Cheers,
Harry

On 04/24/2013 06:24 PM, Valdis.Kletnieks () vt edu wrote:
On Wed, 24 Apr 2013 15:01:36 -0400, Walter Moore said:

On the other hand, a login from Zanzibar is even *more* suspect if Joe
is sitting in his office. :)



This is a request from the internal auditor to see if it is common practice
to monitor this in academia (starting to look heavily like NO).

As others on the list have mentioned, this is really a management issue at
it's core. The rebuttal for that comment was something like: "If technology
can help us to identify a management weakness, we can make corrective
policy driven actions to fix the weakness. IT isn't there to fix the
problem, but to provide visibility into whether or not there is a problem
to correct."

So excluding the potential privacy concerns (which wouldn't really apply in
the corporate world), in their mind it's just using IT as a tool for
efficiency.

Not defending, just relaying.

Thanks,
Will

-- 
Will Froning
Unix SysAdmin
Will.Froning () GMail com
MSN: wfroning () angui sh
YIM: will_froning
AIM: willfroning

Current thread: