Re: Simple emergency out-of-band communication tool

["Kimmitt, Jonathan" <jonathan-kimmitt () UTULSA EDU>]

For out of band communications (specifically for incident response) due to outage, we have a plan to relay messages 
through our external counsel, through their secure systems.

I would caution using the Slack free instance (or any free tools) due to the various 'agreement' that may have 
("forever maintain a copy of the chats")...... which may cause a problem for confidentiality, compliance, privilege, 
etc.

We use Office365 for our mail system, and we have BAA's as education volume license.

If we did not have our external counsel process for using their mail system, I might consider doing another paid for 
service that had the appropriate BAA and approval from our General Counsel.  And keep it as a separate domain 
@IR.utulsa.edu or something similar, and use it only for emergencies.....

Just some thoughts....

-Jonathan


~
Jonathan Kimmitt
CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Jim A. Bole
Sent: Tuesday, October 15, 2019 2:37 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Simple emergency out-of-band communication tool

What do you use for out-of-band communication within IT/Infosec for incidents where normal University tools (email, 
chat, etc) are unvailable?

We've been using a standalone, free Slack instance. It works well. Simple, mobile friendly, etc. It does lack some 
features, like screen sharing and built-in phone/video conferencing, but those haven't been show stoppers.

Just curious what others are using, especially small shops.

Jim Bole
Director of Information Security
Stevenson University
1525 Greenspring Valley Road
Stevenson, MD, 21153-0641
jbole () stevenson edu<mailto:jbole () stevenson edu> | O: 443-334-2696



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community