Beyond 2000 Committee April 8, 2005 Meeting Notes PRESENT Bill Post, Bev Thornton, Brian Oppy, Brooke Banks, Dan Toy, Debra Barger, Frederica Shockley, Jerry Ringel, Kim Williams, Joe Alexander, Dave Abbott, Tyson Henry (attending for Len Fisk), Linda Post, Mike Spiess, Charlie Crabb, Bill Jones, Kathy Fernandes, Cindy Jorth SECURITY INCIDENT UPDATE A document on information security was distributed. The document outlines proposed strategies for securing decentralized information on campus. The document also includes a chart showing the organizational structure of information security personnel on campus. There is a lot of work that needs to be completed. Two technical/data analyst positions will be added to the structure. University Housing recently had an incident whereby approximately 59,000 people had to be notified of a server breach. The Housing server was hacked, however, there is no proof that confidential information was taken off the server. By law, the University has to notify people. Since California passed the law, approximately 26% of organizations having to do these notifications are universities. California is the only state that requires the notification process be completed. Another statistic shows that 20% of all Americans will be a victim of identity theft. The Information Security Officer has asked for feedback from faculty to identify how she can assist them in securing confidential information on faculty computers. E-MAIL SIZE LIMITS UPDATE Wildcat e-mail statistics were distributed. There are currently 9,389 students using Wildcat email accounts. This number has not increased with the implementation of the new e-mail system. Almost 2,000 students are forwarding to another e-mail account. In February, Wildcat e-mail quotas were increased to 50MB. Currently, 96% of users have used only 0-25% of their quota. Only .07% of users have used 96-100% of quota. Spam is not being aged and, eventually, this will become a storage issue. We are currently using 36% of the server. An additional 7% of the server is spam. This will continue to build and build until an aging solution is put into effect. Staff suggests 30-day aging. Every 30 days, spam would be deleted from the spam folder. Many e-mail providers use a 30-day aging solution. Committee agreed on 60-day aging. Staff will verify whether a solution can be found that would date individual e-mails and delete them after 60 days. RELIABILITY OF CRITICAL SYSTEMS Reliability of critical systems was discussed. E-mail announcements are sent out for planned downtime of critical systems in e-mail Announcements. There are times when critical systems might be down longer than planned. Staff try to estimate windows of additional time a system might be down in the cases of planned maintenance. Staff reported the days and times that staff are available to respond to faculty, staff, and student trouble reports. When semester is in session, the student help desk is staffed 24 hours a day except for Saturday and Sunday. After midnight Saturday and Sunday no one will respond until they open the next day. Currently there is no direct way for faculty/staff to report system outages after hours. There is an option on the USRV helpline on Mon-Thurs from 5-9pm to transfer to the Student Computing helpline, but this service has been intended primarily to provide troubleshooting support for faculty/staff remote access issues. User Support Services will look into the feasibility of allowing users calling the USRV helpline after hours the option to be forwarded to the STCP helpdesk to report system outages during all extended STCP helpdesk hours (24hrs/day except Fri/Sat from midnight to noon). USS will also look into the feasibility of enabling the STCP helpdesk to update the USRV system status web site after hours so faculty and staff can tell if a problem has already been reported. ADJOURNMENT The meeting was adjourned.