Educause Security Discussion mailing list archives
Re: [<External>]Re: [SECURITY] Employees forwarding their email offsite
From: "Kimmitt, Jonathan" <jonathan-kimmitt () UTULSA EDU>
Date: Wed, 27 May 2020 12:30:12 +0000
Thank you everyone for the responses! this helps immensely! I'm going to move forward with a plan to our leadership.... I may reach out to some directly for more technical info to give our Systems staff. Thank you all! -Jonathan From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Karen Brown Sent: Tuesday, May 26, 2020 11:26 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [<External>]Re: [SECURITY] Employees forwarding their email offsite Hi Jonathan, 1. Yes but only for employees. 2. We no longer permit auto forwarding. I don't know that we have a "policy," but believe we are working towards it. We educate users to not forward FERPA, PII etc and to use an encrypted service to which we subscribe if the data MUST be forwarded. We monitor outbound mail for DLP and send it to a quarantine, educate the user, and send encryption directions. 3. Yes. We are blocking via Office 365. A role assignment policy blocks auto forwarding rules from functioning. We do not assign the role to students. For Outlook web, we use an outlook web policy that removes the forward option entirely. From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> On Behalf Of Kimmitt, Jonathan Sent: Tuesday, May 26, 2020 9:12 AM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> Subject: [SECURITY] Employees forwarding their email offsite Hi all, After an issue has come up, we are looking at a way to prevent employee's (but not students) from auto-forwarding their university email to personal email accounts. I was curious to what other Universities were doing. 1. Are you blocking auto forwarding? 2. Do you have a university policy on what can and can't be sent? 3. Is anybody doing this in an office365? Thank for anything you can share! -Jonathan ~ Jonathan Kimmitt CISSP, PCIP, CEH, CIPM, CDPSE GPEN, CIPT, CIPP/E, GSNA Chief Information Security Officer Information Technology The University of Tulsa 918.631.2743 ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.proofpoint.com%2Fv2%2Furl%3Fu%3Dhttps-3A__www.educause.edu_community%26d%3DDwMFAg%26c%3DbxXB6XgK3xQjNA1pniRjug%26r%3Da9iWaHMXFWL9c1TccEfCGeoibkJP4gSWup_UiQkYdHQ%26m%3D8oYdI0PjcTmHRcl031HnAzpVWWV8LdMZCNWcBps2pRo%26s%3Dj-P03tpJYUJ5tFZLNJqeAej3_EaDS5d3j8-JjZnFLUY%26e%3D&data=02%7C01%7Cjonathan-kimmitt%40UTULSA.EDU%7C35fa51cb2558454e35e808d80192db9d%7Cd4ff013c62b74167924f5bd93e8202d3%7C0%7C0%7C637261077561922924&sdata=iMKcMQFgioVJLXJ0ovabFS3ZuPaFB3ag1QJ09UoY3Mg%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjonathan-kimmitt%40UTULSA.EDU%7C35fa51cb2558454e35e808d80192db9d%7Cd4ff013c62b74167924f5bd93e8202d3%7C0%7C1%7C637261077561922924&sdata=BvXuDqsOM1BO0R%2FDuJ4b2BxK34TIAh7U0pbPAHexPvM%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Employees forwarding their email offsite Kimmitt, Jonathan (May 26)
- Re: Employees forwarding their email offsite Pesino, Sherry (May 26)
- Re: Employees forwarding their email offsite Pete, Andrew (May 26)
- Re: EXTERNAL: Re: [SECURITY] Employees forwarding their email offsite Spiars, Vince (May 26)
- Re: Employees forwarding their email offsite Karen Brown (May 26)
- Re: [<External>]Re: [SECURITY] Employees forwarding their email offsite Kimmitt, Jonathan (May 27)
- Re: Employees forwarding their email offsite Paul Chauvet (May 29)
- Re: Employees forwarding their email offsite Larry K. Emmons (May 29)