Be Vigilant Stewards of Personal Information

Bruce Petryshak, CIO

It seems as if almost daily there is a report of a security breach resulting in the disclosure of personal information. These breaches involve a variety of enterprises—established auditing firms, the Veteran’s Administration as well as colleges and universities. The last page of this Connect newsletter provides a reprint of a recent article in The Blade (Toledo) outlining the experiences of some Ohio schools. Closer to home, Kent Strickland’s security article details some incidents of thefts that have taken place at BGSU—fortunately, none of these incidents involved sensitive data.

As preparations are underway for the beginning of a new academic year, it is important for all within the University community to be diligent about the security of information with which they have been entrusted. Whether it is the adaptation of new practices or attentively following established practices, it is critical that everyone securely handles sensitive data. Do not store sensitive data on portable media (laptop, flash drive, CD, PDA, etc.). This information should be accessed only by those authorized to obtain the information and whenever possible, it should not be stored on personal desktops.

The CELO project will soon be introducing whole disk encryption as another layer of security. The project has proceeded through the phases of issuing an RFP and hearing vendor presentations. The next step will be the selection of a vendor product that best meets our needs to provide whole disk encryption and the completion of a pilot project. A Web presence for the CELO project is accessible at www.bgsu.edu/offices/cio/page21277.html. This site provides an introduction to the CELO project and will continue to provide project updates.

Since 2003 the ITS security team has shared information and recommended practices to faculty and staff regarding securely protecting data via articles in Connect. The CELO Web page includes links to these articles providing awareness information on portable risk and security; password management practices; consequences, concerns and steps for prevention of identity theft; legislation protecting the confidentiality and privacy of data; measures to secure a desktop to keep private information private; balancing security needs, and the legality of an electronic signature. A proactive approach is needed to protect and secure data. All in our campus community are urged to reference the wealth of information provided in these articles and to diligently follow the steps and tips provided.

The security of BGSU data has always been important. Recent trends in security breaches have raised that importance level even more. It is imperative that all continue to be vigilant in every aspect of handling secure and personal data.

Bruce Petryshak