Data Security and Stewardship Committee
Cordelia Camp 101A
Wednesday, January 11, 2012
Present
Shea Browning, Steve Christison, Dan Clapper, Craig Fowler, Lisa Gaetano,
Larry Hammer, Debbie Justice, Scott Swartzentruber, Kay Turpin
Absent Pam Buchanan, Mike Stewart, Zeta Smith
Guests Barry Bidwell, Russ Crisp, Anna McFadden
Recorder Jenny Owen
Approval of Minutes
 The minutes from the December 14, 2011, Data Security and Stewardship
Committee (DSSC) meeting were approved.
Point of Sale Bookstore
Project
 Anna McFadden reported the Bookstore had purchased new cash registers
and servers. The Bookstore agreed to consolidate their all of their servers
into one server and move it to the data center in Forsyth where it will be
more secure. The server will be managed remotely by a third-party
vendor (MBS).
 Craig Fowler explained this issue was being brought before the DSSC
because it involves a system and system use of credit cards and related
items such as cash and receipts. The target timeline for this is late
February.
Action Item – Point of Sale
 DSSC approved of moving the Bookstore's server into the data center.
Action Item – Storing
FERPA Data
 After a lengthy discussion about storing FERPA data, Larry Hammer
agreed to draft a one-page document that lists dos and don'ts for storing
FERPA data. Shea Browning offered to assist Hammer. The document
will be discussed at the next DSSC meeting in February.
IT Satisfaction Survey
 McFadden reviewed the results from the recent IT Satisfaction Survey.
According to the survey, wireless coverage was the most pressing issue
with faculty, staff, and students. McFadden explained the survey results
would help with upcoming budget hearings and with strategic planning.
Survey results will be available to the campus community by Tuesday,
January 17.
UNC ISO Security Policy
 Fowler reported that there has been an effort underway from the UNC
Security Council and GA to create a standardized security policy. Their
efforts resulted in a recommendation that universities in the UNC system
use the ISO standard. All campuses are now in various stages of
implementation.
 In December, our Board of Trustees approved a resolution that WCU
adopt the ISO standard. Complete implementation is expected to take
place by the end of May.
 Fowler said oversight of this policy should be handled by the DSSC.
 Scott Swartzentruber is representing WCU on the UNC Security Council.
He will help coordinate getting the ISO implementation completed.
Action Items
 Status updates on ISO implementation will be a standing agenda item
until it is completed.
 Jenny will email DSSC a link to the NC IT Security Manual. She will
also email a copy of the UNC ISO Security Policy Framework document
as well as the version that Scott Koger had been working on.