Re: [External] Re: [SECURITY] Email Banner

["Miller, Richard H." <rick () BCM EDU>]

For us the responsibility for approving (whitelisting) belongs with the CISO. He approves which domains should not get 
the banner



[cid:image001.png@01D4E4AE.449FC1F0]<https://www.bcm.edu/>
RICHARD MILLER
NETWORK SECURITY ARCHITECT, NETWORK ENGINEERING & SECURITY
2450 Holcombe Blvd., OW203, Houston, TX 77030
T: 713.798.3532 | E: rick () bcm edu<mailto:rick () bcm edu> | W: www.bcm.edu<http://www.bcm.edu/>

For help, questions, or feedback, visit the IT Service Portal: https://it.bcm.edu<https://it.bcm.edu/>



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Phillip Romig III
Sent: Thursday, June 25, 2020 4:27 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] [External] Re: [SECURITY] Email Banner

***CAUTION:*** This email is not from a BCM Source. Only click links or open attachments you know are safe.
________________________________
If the group will indulge me, I’d like to ask a follow-up question.  Of those who do use a banner or subject line, who 
decides who has the authority to say what messages should be whitelisted (if any).  We have the usual suspects using 
external email services – SaaS and the like. Some are easy decisions (messages from our LMS for example don’t get 
tagged) while others are a controversial mix of political and technical issues.

Do you have an authority who can say yes/no to a whitelisting request, and if so who?

Thanks
Phil

P.S. I realize it is tacky to ask a followup question without responding to the initial question, so you can see an 
example of both our subject line modificaton and our banner in the attached message.

--
Phillip R. Romig, Ph.D.
Chief Information Security Officer
(303) 273-3866


**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community