Re: [External] Re: [SECURITY] Blog Post on - 800-171 Compliance on the Horizon

[Thomas Dugas <dugast () DUQ EDU>]

Thanks for this article. Has anyone started to build any language or data protection clauses into their agreements in 
regards to this potential impending regulation/requirement? Particularly for organizations you share financial aid data 
with?


Tom Dugas
Dugast () duq edu<mailto:Dugast () duq edu>
AVP/CISO
Duquesne University

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Fred Eaker
Sent: Thursday, March 25, 2021 10:36 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [External] Re: [SECURITY] Blog Post on - 800-171 Compliance on the Horizon

Thanks, Brian. Jarret's article caught my eye and I'm happy to hear that a community group is forming.

--
Fred Eaker
Assistant Director, DASA Technology Services
Division of Academic and Student Affairs
N.C. State University
P: 919.513.3896
tech.dasa.ncsu.edu<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftech.dasa.ncsu.edu%2F&data=04%7C01%7Cdugast%40DUQ.EDU%7Cb665dfcbd7e148fa74b708d8ef9b6ba8%7C12c44311cf844e4195c38df690b1eb61%7C0%7C1%7C637522798100287947%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=ehCGrrMt4ziqcwcTdVsa1FLLbx9IqKC%2BSwhrkDuAARk%3D&reserved=0>


On Thu, Mar 25, 2021 at 10:21 AM Brian Kelly <bkelly () educause edu<mailto:bkelly () educause edu>> wrote:
Good morning,
My colleague Jarret Cummings our Senior Advisor for Policy and Government Relations at EDUCAUSE recently published a 
blog post on 800-171 in regard to December's FSA IFAP notice.

https://er.educause.edu/articles/2021/3/800-171-compliance-on-the-horizon<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fer.educause.edu%2Farticles%2F2021%2F3%2F800-171-compliance-on-the-horizon&data=04%7C01%7Cdugast%40DUQ.EDU%7Cb665dfcbd7e148fa74b708d8ef9b6ba8%7C12c44311cf844e4195c38df690b1eb61%7C0%7C1%7C637522798100287947%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=X3ynEuF3wPbYFghou2e8udH67RhnfO63Es7lq1FEVT4%3D&reserved=0>

It is a great read and closes with  "However, colleges and universities that have not yet started down the road to 
implementing 800-171 may not have the luxury of waiting much longer to begin."

The EDUCASUE Cybersecurity Program is forming a Community Group around 800-171 compliance, and developing a "getting 
started with" guide.
More details will be shared in the coming weeks.

Brian

Brian Kelly, CISSP, CISM, CEH
Director, Cybersecurity 
Program<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Ffocus-areas-and-initiatives%2Fpolicy-and-security%2Fcybersecurity-program&data=04%7C01%7Cdugast%40DUQ.EDU%7Cb665dfcbd7e148fa74b708d8ef9b6ba8%7C12c44311cf844e4195c38df690b1eb61%7C0%7C1%7C637522798100297941%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=81d5OYdyj9oZIh60GpBATnJ8TUqe5I4rVF%2BgZM%2F8rqQ%3D&reserved=0>
bkelly () educause edu<mailto:bkelly () educause edu>

EDUCAUSE
Uncommon Thinking for the Common Good
Follow HEISC on 
LinkedIn<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fshowcase%2Fhigher-education-information-security-council-heisc-%2F&data=04%7C01%7Cdugast%40DUQ.EDU%7Cb665dfcbd7e148fa74b708d8ef9b6ba8%7C12c44311cf844e4195c38df690b1eb61%7C0%7C1%7C637522798100297941%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=JLjqIh99a0LHblCq8iBsOam1rdcpRCdrlesFstc5Y7A%3D&reserved=0>
 | Twitter: @HEISCouncil

direct: 475.449.6440 | 
educause.edu<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2F&data=04%7C01%7Cdugast%40DUQ.EDU%7Cb665dfcbd7e148fa74b708d8ef9b6ba8%7C12c44311cf844e4195c38df690b1eb61%7C0%7C1%7C637522798100307934%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=gKso4IACVr8NJw%2FqEYNq65rCwSSy6CFBMO7ZeLZPx4E%3D&reserved=0>
1150 18th Street, NW, Suite 900 Washington, DC 20036







**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cdugast%40DUQ.EDU%7Cb665dfcbd7e148fa74b708d8ef9b6ba8%7C12c44311cf844e4195c38df690b1eb61%7C0%7C1%7C637522798100307934%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=OPndOIT2R5ecqPutVWkRnPvxjGzb%2B88IRfxl4WeTPhw%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cdugast%40DUQ.EDU%7Cb665dfcbd7e148fa74b708d8ef9b6ba8%7C12c44311cf844e4195c38df690b1eb61%7C0%7C1%7C637522798100317928%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=5acJ5paofp%2FlXSWVrWAVa4XJYOVVc0twcwQkiGte2kw%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community