Re: Personal Email and other Services

["King, Ronald A." <raking () NSU EDU>]

Our AUP does not permit the storage of University (read Commonwealth of VA) data within a non-sanctioned third party 
cloud service (read personal storage paid or free). The concern is data ownership. Unless there has been a major shift 
in the T&Cs, these third parties own the data once transferred. Thus, we have no legal right to enforce any of our 
policies or best practices to maintain, protect or recover the data.

Ron

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
raking () nsu edu<mailto:raking () nsu edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Petrus Williams
Sent: Thursday, May 2, 2019 1:38 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Personal Email and other Services

Due to the influx of new software developers ( many from Higher Education Institutions) we are being asked to relax our 
policy about not using personal services ( email, dropbox, google, git etc.) for storing or conducting institution 
business.  The main reason for our current policy is that those work products are considered belonging to the 
institution and as such when you leave the institution we want to make sure that the work product stays with us ( of 
course there is no guarantee that a copy won't make it out in some form or fashion but that's another topic). There are 
also security concerns ( personal email services maybe hosted under someone's desk at home!). There are some rumblings 
that these restrictions are too limiting for this new crop of developers.

So I ask. At your institutions what is the general policy on conducting Institution business using personal services ( 
email, dropbox, git etc.). Thanks for your feedback

Thanks,

Petrus Williams
J. Paul Getty Trust
Assistant Director GDI Infrastructure & Operations
Phone 310-440-6397