Educause Security Discussion mailing list archives

Re: a question about having College ID number as part of directory information


From: Chris Green <cmgreen () UAB EDU>
Date: Thu, 7 Nov 2013 18:10:44 +0000

It generally depends on what that number is needed for.   If it's faculty convenience you can probably provide a 
separate way to view without further concern.

Student ID numbers generally have an odd way into creeping into other systems/processes without enough thought where 
exposure is a major concern (card access/stored value sytems/parking/password resets).

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Roy 
Galang
Sent: Thursday, November 07, 2013 7:58 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] a question about having College ID number as part of directory information

HI All,

This may have been addressed before but I am being asked if providing a college ID number on our LDAP and other 
directory services is a security risk.

I'm feeling that it isn't but I'm press to put a statement behind it that will put people at ease.

Thanks,

Roy Galang
________________________________
Roy Galang
Director Technology Infrastructure
Library and Information Systems
Wheaton College
26 E. Main Street
Norton, MA 02766

Galang_Roy () WheatonCollege edu<mailto:Galang_Roy () WheatonCollege edu>


Current thread: