New Project Focuses on Protecting Data Resources
by Bruce Petryshak

Identity theft complains represented 37 percent of the almost 700,000 complaints received in 2005 according to a 2006 FTC report.  This report also indicated that Internet-related complaints account for 46 percent of all fraud complaints.  A recent report from the Department of Justice revealed that in the first six months of 2005, 3 percent of all U.S. households, involving over 3.5 million people, were victims of identity theft.  I bring this to your attention to highlight the fact that Internet crime and theft of data is rapidly moving into the mainstream.

In this issue of Connect, Kent Strickland documents several instances in which those being entrusted with personal information needed to do more to protect and secure that information.  As you review his article, please take a moment to consider how many of these instances could apply within your current work environment.

As you access information in the coming days and weeks, please stop to consider some of the following questions.  Is any of this information considered personal and/or sensitive?  If it were your information, would you want it to fall into the hands of a stranger?  If two pieces of information were put together, would it be possible for an unauthorized individual to obtain personal documents or information?  Are you accessing sensitive information on your computer or other device that could be easily viewed by an unauthorized individual?  Do you move or store data on a mobile device?  What would happen if that mobile device were lost or stolen?  Is any of the information considered personal under regulations such as Ohio HB 104, FERPA, HIPAA?

As important as it is for all of us to consider these questions and be vigilant with the information that we are entrusted with, greater support is needed.  To help in that support, the Office of the CIO has established a working group charged with creating a plan that will enable the University community to protect and secure our data resources, whether we are speaking of sensitive data and privacy issues or the protection of our intellectual property.  The planning efforts thus far have resulted in the formation of a project that has been named CELO (kay-low)-a Latin word meaning to cover, shield, protect or defend.  This is a multi-phase project intended to help protect the privacy of our University community and secure access to our intellectual property.  The first phase will focus on whole disk encryption for University resources.  The working group will soon complete a pilot project and will use the results as a basis for developing an implementation plan.  Watch for further details during the months ahead as we continue to develop our information security strategy, and remember to stop and consider how you use the information for which you have been given access.