Re: Key Management

["LaMantia, Tracy M" <tmlamantia () WPI EDU>]

Hi Colin et al,

I'm interested in any responses you get from this inquiry and leverage any lessons learned.  Thank you!!

Tracy LaMantia
Program Manager, Identity and Access Management
Information Technology
Worcester Polytechnic Institute

O:  508-831-6396
M: 508-735-7446


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Colin 
Abbott
Sent: Tuesday, August 22, 2017 10:12 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Key Management

Hi,

   As part of our migration from Banner to Workday we have been going through the cloud security alliance control 
matrix and have prioritized Key Management as one of the controls where we want to improve our maturity.

Has anyone else put in place a governance process and policies around key management?  anyone doing third party key 
escrow?

Thanks
Colin

Colin Abbott, CISSP | IT Security Architect  | McGill University | Network and Communication Services | 514-398-5070