Re: [Ext] Re: [SECURITY] Alumni and Retiree Email Question

[Mark Reboli <mreboli () MISERICORDIA EDU>]

We likewise at this time have a policy to allow retirees (if they meet the requirements to have a retiree account).

Questions though based on the feedback.  

1.      In a couple of the AUPs I have seen it states that the account should only be used for academic purposes.  
Retirees are mainly utilizing the account for personal reasons, is this a issue?
2.      Retirees may have access to the entire University address book.  They can see students, does your FERPA 
compliance officer see that as an issue as they are no longer have a business reason?
3.      Retirees have the potential to store information that may be sought for by eDiscovery litigation or via new 
privacy laws does that present an issue to you? 

Just curious as we continue to look at it.

M
Mark Reboli
Network/Telecom/IT Security Manager
Misericordia University
(570) 674-6753

This e-mail and accompanying attachments are confidential.  The information is intended solely for the use of the 
individual to whom it is addressed. Any review, disclosure, copying, distribution, or use of this e-mail communication 
by others is strictly prohibited. If you are not the intended recipient, please notify us immediately by returning this 
message to the sender and delete all copies. Thank you for your cooperation.



-----Original Message-----
From: The EDUCAUSE Security Community Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Madeksho, 
Chris
Sent: Wednesday, October 30, 2019 8:49 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] [Ext] Re: [SECURITY] Alumni and Retiree Email Question

External Email: Do not click any links or open any attachments unless you trust the sender and know the content is safe.

Does anyone require the retirees that keep their .edu email address to complete annual training about phishing and 
malware?  I would like to see that as a requirement for keeping the service.

Chris Madeksho, CISA CRISC
Risk, Security Awareness and Outreach Analyst The University of Tennessee Health Science Center Information Security, 
Information Technology Services Lamar Alexander Building, Room 770
877 Madison Avenue
Memphis, TN 38163
mmadeksh () uthsc edu
t: 901.448.1579
https://uthsc.edu/its/information-security



-----Original Message-----
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Mandi Witkovsky
Sent: Wednesday, October 30, 2019 7:47 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [Ext] Re: [SECURITY] Alumni and Retiree Email Question

My experience is that students don't generally use their email much while they are here, and they are even less 
interested in it once they leave--except for getting free services from having a .edu address.  Alumni and Development 
think that keeping an alumni email makes staying in touch easier, but I've got my doubts about that.

Retirees, on the other hand, do tend to want to keep their email and do use it.  Partially it's because many of them 
had long careers here and they have a sentimental attachment, and as previously said, they may not have any other 
address.  They received their email address when it was still pretty elite to have one.

To address the original question, if alumni and/or retirees get to keep the account, there is always the chance the 
account will be used for malintent.  Seems like you're accepting that risk by maintaining the accounts. The best you 
can do is make sure your security and acceptable use policies and standards cover the criteria for account termination.

mandi



-----Original Message-----
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Seth A. Shestack
Sent: Wednesday, October 30, 2019 5:49 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Alumni and Retiree Email Question

We have alumni email for all (for life as long as they update their contact info with the advancement office annually) 
The advantage to the Alumni is a free email account that continues to use the same address that they have used while a 
student.
The advantage to the university it that it helps the advancement office keep contact information up to date for 
solicitations.
We also have some retiree email although that is declining, mainly faculty who believe that they are entitled to it, 
however it is something we discourage.

Regards
Seth

-----Original Message-----
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Valdis Kletnieks
Sent: Tuesday, October 29, 2019 6:31 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Alumni and Retiree Email Question

[EXTERNAL MAIL - DO NOT CLICK ON LINKS OR OPEN ATTACHMENTS YOU DO NOT TRUST]

On Tue, 29 Oct 2019 21:11:38 -0000, "Jones, Mark B" said:

> I have never heard of any institutions with stories of anything but 
> rare use of alumni or retiree email accounts.

I guess I'm a rare exception.  :)

> From an alumni/retiree perspective the only advantage to 'email for 
> life' is the free service.  But there are so many free email options 
> available and people normally establish a free email account before 
> they become affiliated with the university.

Remember that somebody retiring now with 30 years service started in 1989, and probably didn't have a free email 
account before they took the job, unless it was one from a *very* progressive ISP.  Hotmail launched in 1996, Yahoo 
Mail in 1997, and GMail has only been out for the public for 15 years since 2004, which is kind of short service for 
retirement unless the person had another position for a long time elsewhere....

Back in 1993, "always on connection, email client, and gopher client" was enough to make the national news.

http://www.bev.net/about-us/history-bev

(I'm sure Randy has a few bar stories about the zoo getting *that* service launched, I know I do.. :)

No web browser, because http and html were still in the future....

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community