Re: Employee Non-Disclosure Agreement

[Gael Frouin <gfrouin () BERKLEE EDU>]

Berklee requires its staff and its workstudies (but this is inconsistent at
the moment and depends on the office in charge of the workstudies) to sign
confidentiality agreements. The justification is that they may receive or
have access to some sensitive / legally protected information while working
on systems and applications.
As far as I know, no one has questioned this.

On Thu, Oct 11, 2018 at 1:09 PM Franzi Willenbuecher <fwillenb () emporia edu>
wrote:

> Thanks, Jeff! How did you justify the need for an NDA to those employees?
>
>
>
> Franzi
>
>
>
> *From:* The EDUCAUSE Security Community Group Listserv <
> SECURITY () LISTSERV EDUCAUSE EDU> *On Behalf Of *Jeff Choo
> *Sent:* Thursday, October 11, 2018 12:00 PM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* Re: [SECURITY] Employee Non-Disclosure Agreement
>
>
>
> Hi Franzi
>
>
>
> We only required any employee including work-study students to sign an NDA
> if they are handling PII, PCI-DSS, or HIPAA related data.  This is on top
> of the of the employee policies handbook, FERPA, and WISP.
>
>
>
> Regards,
>
>
>
> Jeff
>
>
>
>
>
> *“A problem well put is half solved.” – John Dewey*
>
>
>
> *Jeff Choo - Director, Information Technology | Information Security
> Officer*
>
> William James College
>
> One Wells Avenue, Newton, MA 02459
>
> Helpdesk: 617-327-6777 x1600
>
> Direct: 617-564-9344
>
> Email: jeff_choo () williamjames edu
>
>
>
>
>
>
>
> *From:* The EDUCAUSE Security Community Group Listserv <
> SECURITY () LISTSERV EDUCAUSE EDU> *On Behalf Of *Franzi Willenbuecher
> *Sent:* Thursday, October 11, 2018 12:55 PM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* [SECURITY] Employee Non-Disclosure Agreement
>
>
>
> Hello,
>
>
>
> What is everyone’s stance on requiring non-disclosure agreements (possibly
> in addition to an acceptable use agreement) for your employees? If you do
> require it, how do you justify the need for it?
>
>
>
> Thanks,
>
> Franzi
>
>
>
>
>
>
>
> [image: Emporia State University]
>
> *Franzi Willenbuecher *Information Security Training Analyst
> Information Technology
> Emporia State University
> 620-341-6704
> fwillenb () emporia edu
> hornet.emporia.edu
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fhornet.emporia.edu&c=E,1,Ak7FKMXoV-9hloAs4lr_WCH1kX0yZSD3wER7cyLascFKx0IZ1cVvwvU09FC0DMOXhDYAtQk0KkonnzU56a7bCAmi74fXdYpzDXrTKBaT9cFbCGpTl3uUi2Mb&typo=1>
>
> [image: cid:image002.png@01D45735.E1BE3810]   October is National Cyber
> Security Awareness Month! Learn more at hornet.emporia.edu
> <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fhornet.emporia.edu&c=E,1,nxS_jIXw34FoXV97O6Dw1wNQa4o2PWRxFtRJV1tjXoPxlyCI9M4_VfqIWVdMyRy_iwgtRg8MKqK9iJNsVsn7dbtB-QUBhCAHuXoeG1NGFJBSh7eGddY42A,,&typo=1>
> “Information Security”
>
>
>
> This message may contain confidential information intended only for the
> individual named. If you received this message by mistake, please let the
> sender know by e-mail reply and delete it from your system. If you are not
> the intended recipient you are hereby notified that disclosing, copying,
> distributing or taking any action in reliance on the contents of this
> information is strictly prohibited.