Re: Security policies for student workers

[Thomas Carter <tcarter () AUSTINCOLLEGE EDU>]

The federal work study funds students. The college paid student workers do go through HR and are considered “employees” 
.

Thomas Carter
Network & Operations Manager
Austin College

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mike 
Cunningham
Sent: Tuesday, March 15, 2016 11:11 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Security policies for student workers

Are you talking about students getting paid by federal work-study funds or student workers being paid from regular 
college operating funds?  We have both kinds of students working for us. We have always considered a part-time worker, 
be that a student or not a student, to be an employee that is hired like any other employee. A position is announced, 
people apply, they get interviewed, Hiring request goes to HR, HR does their thing, Payroll does their thing, and the 
part-time worker becomes an official college employee. No difference between hiring a part-time worker from the local 
population or hiring a part-time worker who happens to be taking classes. Until about 3 years ago we did treat 
work-study students differently but have since changed them to the same hiring process with HR as any other part-time 
student except that the Financial Aid office has to be involved in the hiring and pay tracking. End result is that all 
students who get a paycheck are employees and have to follow all employee policies and procedures.


Mike Cunningham
Vice President of Information Technology Services/CIO
Pennsylvania College of Technology



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas 
Carter
Sent: Tuesday, March 15, 2016 11:18 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Security policies for student workers

They don’t go through HR and differ from traditional employees in a number of ways. I don’t know of any policy outside 
of IT that explicitly states that they are in the same category as traditional employees.

Thomas Carter
Network & Operations Manager
Austin College

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Barton, 
Robert W.
Sent: Tuesday, March 15, 2016 9:33 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Security policies for student workers

Did that pass the legal sniff test?  We are having the same debate here, since they are not paid fully by the 
University.  Historically, they have been put in a different category here.

Robert W. Barton
Director of Information Security
Lewis University
One University Parkway
Romeoville, IL  60446-2200
815-836-5663

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Andregg, 
Bryan Courtney
Sent: Tuesday, March 15, 2016 9:29 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Security policies for student workers

Student workers are employees at UNC-CH. All appropriate policies apply. More broadly, our policy and standards 
language clarifies that they apply in all cases where individuals interact with university information and/or systems 
regardless of personnel or end-point type.
--
Bryan C. Andregg
IT Security and Systems Manager
Instructional and Information Systems
UNC Gillings School of Global Public Health

From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of Brad Judy <brad.judy () CU EDU<mailto:brad.judy () CU EDU>>
Reply-To: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>>
Date: Tuesday, March 15, 2016 at 10:12 AM
To: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE 
EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: Re: [SECURITY] Security policies for student workers

I’m confused by the statement “not being employees”.  Why wouldn’t student workers fall under all of the same policies 
as other employees?

Brad Judy

Information Security Officer
Office of Information Security
University of Colorado
1800 Grant Street, Suite 300
Denver, CO  80203
Office: (303) 860-4293
Fax: (303) 860-4302
www.cu.edu<http://www.cu.edu/>

[cu-logo_fl]

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas 
Carter
Sent: Tuesday, March 15, 2016 7:59 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Security policies for student workers

Do you have specific security policies for student workers (work study, etc)? Do you have specific policies about the 
use of personal computers used by student workers? Can you point me to these policies or send me a copy?

I’m trying to better define policies for student workers as they fall into a gray area of not being employees and not 
being just students. Their work may require access to resources that are restricted from normal students. Additionally, 
as a small school, we have some student workers using personal computers to do their work. Primarily artistic work 
(graphic design, video editing, etc), but this sharing on student-owned devices worries me somewhat.

Thomas Carter
Network & Operations Manager
Austin College


This message (including any attachments) is intended only for the use of the individual or entity to which it is 
addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from 
disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you 
are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. 
If you have received this communication in error, notify us immediately by telephone at (815)-836-5950 and (i) destroy 
this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.