Re: Organizations residing on campus

["Gregg, Christopher S." <csgregg () STTHOMAS EDU>]

This is something we are starting to work through now.  We have several entities on our campus who have varying levels 
of connection to the university, and we have a long history of treating them all as full members of the university in 
terms of being granted accounts, using university leased computers (with and without a chargeback), having their 
website hosted by the university, receiving technical support, etc.  We are working with our legal office to establish 
more formal agreements with these groups that clearly define what services they receive from the university and which 
they need to provide themselves.  This makes sense to do, but unwinding years of history is a challenge and when the 
organization also has ties to an academic program it gets even more interesting.

Since we are just starting down this path, I too would be interested to hear from others who have these relationships 
more formally defined.  I'd also be happy to collaborate with others who working on this same topic.

Regards,

Chris


Chris Gregg
Associate Vice President of Information Security & Risk Management
Information Technology Services (ITS)
csgregg () stthomas edu<mailto:csgregg () stthomas edu>
p 1 (651) 962-6265
University of St. Thomas | stthomas.edu<https://www.stthomas.edu/>



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Mandi 
Witkovsky
Sent: Thursday, October 13, 2016 9:50 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Organizations residing on campus

We have several non-university entities (non-profit organizations) who have space to operate on campus.  Most of the 
time, all we provide is phones and internet access, but sometimes it gets hairy when the org wants to run servers on 
premise.  Does anyone have published standards or guidelines that they give to these types of entities so they know 
what is allowed, and what expectations for security, and what the expectations are on both sides?

Thanks,
mandi