Data Security and Stewardship Committee Cardinal Room 214 Thursday, February 9, 2011 Present Shea Browning, Pam Buchanan, Steve Christison, Craig Fowler, Lisa Gaetano, Larry Hammer, Debbie Justice, Scott Koger, Anna McFadden, Zeta Smith, and Mike Stewart Absent Scott Swartzentruber, Kay Turpin Guests Diana Catley, Stan Hammer, Brandy Henning, Anna McFadden, Kellie Monteith, and Sergey Chernokov Recorder Jenny Owen Handouts Approval of Minutes University Policy 95 Update Action Item Review of Project Proposal 12-08-10 DSSC Minutes University Policy 95 – Data Network Security & Access Control Checklist – Employee Access Termination Project Project Proposal – Residential Life-Student Affairs Early Alert System The minutes from the January 27, 2011, Data Security and Stewardship Committee (DSSC) meeting were approved. Diana Catley and Stan Hammer gave an update on revisions to Policy 95. Catley explained the new process for automating Employee Access Termination (EAT) to university systems when employees leave the university. Catley said this was a requirement of the recent IT audit. The goal is to go live with this new automated process by March 1, 2011. Catley asked DSSC members to read the revised Policy 95 and provide her or Stan Hammer with their feedback before Monday, Feb. 21—when the revised Policy 95 goes back to Executive Council for review and approval. Anna McFadden reported that Student Affairs had submitted a project proposal for consideration by the IT Governance & Prioritization process. Because this project involves FERPA, HIPAA and police report information, McFadden thought it would be best to have DSSC review the proposal before it is presented to governance committees. McFadden introduced Kellie Monteith and Sergey Chernokov, both from Student Affairs. They outlined their proposal for becoming more efficient with the Early Alert System by building a web-based form to interface with a database that they would also design. Fowler commented that it would be good to include this project in a growing list of projects that would benefit by having SharePoint as their foundation. Action Items After a brief discussion, it was agreed that even though this was a worthy project, there weren’t enough IT resources available that could be committed to it. Brandy Henning will meet with Monteith and Chernokov to talk about the possibility of using a module from a third-party solution (Maxient) that Student Affairs is already using. Misc. Action Items Agenda item requested by Fowler for the next meeting: What baseline access do employees get? Action items to be carried forward to the March DSSC meeting: o Koger will give an update on the request for quotes for disk degaussing o Koger will give an update on Data handling procedures o Koger and Gaetano will report on revisions to Policy 93 Action item to be carried forward for the April DSSC meeting: o Security for Active Directory external accounts will be moved to the April DSSC meeting (Anna McFadden). Several end-users will be invited to the next DSSC meeting. The draft end-user agreement will be sent to DSSC members for their review so it can be discussed at the next meeting.