Educause Security Discussion mailing list archives

Re: Tableau Public Online Dashboards


From: "Kimmitt, Jonathan" <jonathan-kimmitt () UTULSA EDU>
Date: Tue, 20 Jul 2021 13:53:31 +0000

Thank you!   This is very helpful!

-Jonathan



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Brad Judy
Sent: Monday, July 19, 2021 4:52 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Tableau Public Online Dashboards

My rule for Tableau Public is that the raw data must be fully public in nature (which is the entire point of the 
Tableau Public offering). It's a neat tool and we have some groups using it for non-PII data.

I absolutely do not trust the service for any non-public data. Tableau themselves says not to use it for non-public 
data.

Brad Judy

Information Security Officer
Office of Information Security
University of Colorado
1800 Grant Street, Suite 300
Denver, CO  80203
Office: (303) 860-4293
Fax: (303) 860-4302
www.cu.edu<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.cu.edu%2F&data=04%7C01%7Cjonathan-kimmitt%40UTULSA.EDU%7C4bd7280f76df40b422fd08d94aff7626%7Cd4ff013c62b74167924f5bd93e8202d3%7C0%7C0%7C637623283323917875%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=HhNI4kZlnbjw1cuiMyzN%2B7GQydKepCJUrMfLhnmNLec%3D&reserved=0>

[cu-logo_fl]


From: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> on behalf of 
"Kimmitt, Jonathan" <jonathan-kimmitt () UTULSA EDU<mailto:jonathan-kimmitt () UTULSA EDU>>
Reply-To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Date: Monday, July 19, 2021 at 2:11 PM
To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: [SECURITY] Tableau Public Online Dashboards

Hi all,

 During a recent conversation with our IR team about sending our student data to Tableau Online to present dashboards 
publicly, a question came up on how other Universities are presenting the data.

For those that do send data to Tableau online for public reports/dashboards, do you anonymize the data before you send 
to Tableau, or do you send raw student data, then trust the dashboards to not allow access to FERPA information?

Due to the sensitivity of the data, please feel free to respond directly instead on the open forum...

Thanks!

-Jonathan





~
Jonathan Kimmitt
CISSP, FIP, CDPSE, CIPP/E, CIPM, CIPT,
OTCP, GLEG, GPEN, GSNA, PCIP, CEH
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743
Jonathan-kimmitt () utulsa edu<mailto:Jonathan-kimmitt () utulsa edu>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cjonathan-kimmitt%40UTULSA.EDU%7C4bd7280f76df40b422fd08d94aff7626%7Cd4ff013c62b74167924f5bd93e8202d3%7C0%7C0%7C637623283323917875%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=o8XT5igJGLocE4%2FJVmtGLehwKFrqLVoUQ9EsjEuSRMw%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cjonathan-kimmitt%40UTULSA.EDU%7C4bd7280f76df40b422fd08d94aff7626%7Cd4ff013c62b74167924f5bd93e8202d3%7C0%7C0%7C637623283323927828%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=QFUEGz28CJ8SVdNg%2F9Zp4w42wThSplbWQiVksU4Xegg%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: