Storage of PII, wanting location that requires MFA?

["Kimmitt, Jonathan" <jonathan-kimmitt () UTULSA EDU>]

Hi all,

    We have a legacy NFS share that we utilize for the temporary storage of PII during processing/transfer, etc.

About a third of our full time staff have access (limited by person and department per folder), which is automagically 
mapped on their windows machines upon login.

I'm curious as to what other institutions are doing to provide a secure place to store (even temporary) PII, and 
specifically I'm trying to determine how to require MFA to the data.

We use Office365 and do have a BAA with Microsoft, so it's possible to utilize OneDrive, but we have been hesitant for 
a variety of reasons.

Any thoughts on another process/tool/location/etc. to provide secure/MFA space for PII storage?

-Jonathan

~
Jonathan Kimmitt
CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community