Re: [Ext] Re: [SECURITY] Utilizing zoom

["Hart, Michael" <mhart20 () MSUDENVER EDU>]

https://docs.microsoft.com/en-us/microsoftteams/teams-security-guide


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Kimmitt, Jonathan
Sent: Thursday, April 2, 2020 1:08 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] [Ext] Re: [SECURITY] Utilizing zoom

We were in the process of purchasing Zoom for our telehealth….

With the recent information I am more inclined to reverse that decision…..

However, while we can get a BAA with Microsoft Teams (and we already do), what steps do we need to do to make sure that 
Teams meets the requirements for telehealth?

Is there any published checklists that will help in the process?

-Jonathan


~
Jonathan Kimmitt
CISSP, PCIP, CEH, CIPM,
GPEN, CIPT, CIPP/E, GSNA
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Leber, Dennis E
Sent: Thursday, April 2, 2020 1:52 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] [Ext] Re: [SECURITY] Utilizing zoom

Our team conducted a risk analysis of Zoom; attached is our summary. NASA, Tesla, and others have immediately stopped 
the use of Zoom.

[https://uthsc.edu/brand/images/email-signature/shortsig-green-horizontal.png]
Dennis E. Leber

Chief Information Security Officer (CISO)

The University of Tennessee Health Science Center
Office of Cybersecurity
877 Madison Ave
6th Floor
Memphis, TN 38163

dleber () uthsc edu<mailto:dleber () uthsc edu>
t: 901.448.5848
c: 270.307.1609
https://www.uthsc.edu/its/cybersecurity/<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.uthsc.edu%2Fits%2Fcybersecurity%2F&data=02%7C01%7Cmhart20%40MSUDENVER.EDU%7Cfe324c9cb282465ac23f08d7d7391fac%7C03309ca417334af9a73cf18cc841325c%7C1%7C0%7C637214512661662682&sdata=UStpYh8dP2z5EHpEiw3xaPdha3h%2FfzloabXu72L%2FP0g%3D&reserved=0>




________________________________
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of Menne, Michael S <michael.menne () MNSU EDU<mailto:michael.menne () MNSU EDU>>
Sent: Thursday, April 2, 2020 1:22 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> <SECURITY () LISTSERV EDUCAUSE 
EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: [Ext] Re: [SECURITY] Utilizing zoom

We are using Zoom for telehealth. Zoom has a Healthcare option that disables recording capability and encrypts chat 
messages. There may be other things as well that I'm not aware of.

 I've seen several local providers (including Mayo Clinic) use Zoom for Telehealth.



On 4/2/20, 1:21 PM, "The EDUCAUSE Security Community Group Listserv on behalf of Rick DeCaro" <SECURITY () LISTSERV 
EDUCAUSE EDU on behalf of Rick.Decaro () LOGAN EDU<mailto:SECURITY () LISTSERV EDUCAUSE 
EDU%20on%20behalf%20of%20Rick.Decaro () LOGAN EDU>> wrote:

    +1 for piloting Doxy.me.   We also considered Zoom, Spruce and Teams.


    Rick DeCaro
    Director of Information Technology | Logan University
    1851 Schoettler Road | Chesterfield, MO 63017
    Phone: (636) 230-1760 | Logan.edu




    -----Original Message-----
    From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Bill Thompson
    Sent: Thursday, April 02, 2020 1:18 PM
    To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
    Subject: Re: [SECURITY] Utilizing zoom

    This e-mail was received from an external source. Please be cautious when replying, clicking links or opening 
attachments.



    Our counseling center looked at Zoom for Healthcare and decided to pilot doxy.me instead primarily for the 
integrated teleconsent feature.

    Best,
    Bill

    On Thu, Apr 2, 2020 at 2:14 PM Mark Reboli <mreboli () misericordia edu<mailto:mreboli () misericordia edu>> wrote:
    >
    > Question:  Like most of you we have multiple options for telehealth and addressing clinical hour needs for our 
students.  I am looking at the different options and any concerns with utilizing Zoom over some other solutions.  Any 
guidance would be appreciated.
    >
    >
    >
    > Thank you
    >
    >
    >
    > M
    >
    >
    >
    > Mark Reboli
    >
    > Network/Telecom Manager
    >
    > Misericordia University
    >
    > (570) 674-6753
    >
    >
    >
    > This e-mail and accompanying attachments are confidential.  The information is intended solely for the use of the 
individual to whom it is addressed. Any review, disclosure, copying, distribution, or use of this e-mail communication 
by others is strictly prohibited. If you are not the intended recipient, please notify us immediately by returning this 
message to the sender and delete all copies. Thank you for your cooperation.
    >
    >
    >
    > **********
    > Replies to EDUCAUSE Community Group emails are sent to the entire
    > community list. If you want to reply only to the person who sent the
    > message, copy and paste their email address and forward the email
    > reply. Additional participation and subscription information can be
    > found at
    > https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
    > educause.edu%2Fcommunity&amp;data=02%7C01%7Crick.decaro%40LOGAN.EDU%7C
    > ab6aa00ac3f346dd35f208d7d7323272%7C12b0502287ae4711b25c041c20615f0a%7C
    > 0%7C0%7C637214482910331728&amp;sdata=nOY6jM%2BU6xGn%2B3e42wLgOo866US6B
    > Omk3K%2B32mCvfCM%3D&amp;reserved=0

    **********
    Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&amp;data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C8e3e5a15bc7e4f1dc95808d7d7329f0f%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C1%7C637214484734119332&amp;sdata=8ptcXQxkkSwMEFiafRymKmeisbezmBP9O4zx2IYng7k%3D&amp;reserved=0<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmhart20%40MSUDENVER.EDU%7Cfe324c9cb282465ac23f08d7d7391fac%7C03309ca417334af9a73cf18cc841325c%7C1%7C0%7C637214512661672677&sdata=leEKCXIUvpDx0xkE5%2BZNz91ODDJgwILwNCuHfuaYHc0%3D&reserved=0>

    **********
    Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&amp;data=02%7C01%7Cmichael.menne%40MNSU.EDU%7C8e3e5a15bc7e4f1dc95808d7d7329f0f%7C5011c7c60ab446ab9ef4fae74a921a7f%7C0%7C1%7C637214484734129328&amp;sdata=rfaRxNdsecHlDGiAUr9DSWNMPXquGGgu4lSmlFSawzE%3D&amp;reserved=0<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmhart20%40MSUDENVER.EDU%7Cfe324c9cb282465ac23f08d7d7391fac%7C03309ca417334af9a73cf18cc841325c%7C1%7C0%7C637214512661682670&sdata=4DoHmtUT7VXpW724yqWaSNbCY1mgk78dxhlDx%2BQUIu8%3D&reserved=0>


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmhart20%40MSUDENVER.EDU%7Cfe324c9cb282465ac23f08d7d7391fac%7C03309ca417334af9a73cf18cc841325c%7C1%7C0%7C637214512661682670&sdata=4DoHmtUT7VXpW724yqWaSNbCY1mgk78dxhlDx%2BQUIu8%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmhart20%40MSUDENVER.EDU%7Cfe324c9cb282465ac23f08d7d7391fac%7C03309ca417334af9a73cf18cc841325c%7C1%7C0%7C637214512661692664&sdata=DX92iT%2Fenrvm2Nm1RUzClwdEWgzsoEKWfhQlzPakcd0%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmhart20%40MSUDENVER.EDU%7Cfe324c9cb282465ac23f08d7d7391fac%7C03309ca417334af9a73cf18cc841325c%7C1%7C0%7C637214512661702661&sdata=j%2FKMNUhVprTWTGWY5bF1GhwavsCyxwW0iJUN37TjFIE%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community