|
|
MEMORANDUM
TO: CIO_Inform Listproc
DATE: January 17, 2006
As many of you know, there has been a number of computer related incidents at other institutions that have resulted in the
possible disclosure of personal information. Most recently both Cleveland State University and the University of Toledo reported
the theft of notebook computers that contained sensitive information. There have also been reported security violations at
Kent State University, Miami University, and the University of Cincinnati. As you are aware, this type of disclosure of personal
and sensitive information can lead to identity theft and potential violations of state law.
In the future it will be required that this type of information be stored in an encrypted form. We are currently in the process
of establishing new procedures and practices with regard to using encryption to protect personal and sensitive information,
and you will hear more about that in the coming months. In the mean time, we are requesting that you NOT store personal or
sensitive information regarding students, colleagues, or research subjects on portable media. Portable media includes, but
is not limited to, notebook computers, jump drives, CDs, DVDs, PDAs, and cell phones, or other easily movable information
storage devices. In every instance that you are the steward of personal information, whether on portable media or other computer
devices, such as servers, please be vigilant.
Below is a URL that contains information regarding the latest information, House Bill 104, concerning this matter which reinforces
the need for all of us to share in the responsibility of keeping electronic information (in what ever format) secure and constantly
under control.
http://www.legislature.state.oh.us/bills.cfm?ID=126_HB_0104
http://lsc.state.oh.us/coderev/hou126.nsf/House Bill Number/0104?OpenDocument
Thank you for your attention to this very important matter. If you have any questions or concerns please contact me at cio@bgsu.edu
or Kent Strickland, our head of information security at kstrick@bgsu.edu
Bruce M. Petryshak, CIO
|
|
