Re: Role of Campus Police. Was: number of IT security staff

["Piscitello, Frank" <frank () WCUPA EDU>]

Well, I have a different view of Police Vs. IT staff.  I treat it
similar to corporate security.  If the incident is "civil" in nature,
then I handle it as an IT incident. If it seems that it is more criminal
or the case turns into criminal, I contact law enforcement.  The campus
police can handle some incidents (I usually help with suggestions).
However, I also have contact with the State Police.  For example, if I
am going over a hard-drive for campus policy violations, and I find a
file full of credit card number, names, and birthdates.  This would lean
me to a criminal issue, and I would forward all my information to Law
Enforcement.  I use the same hardware/software to aquire hard drive
evidence, so it makes it real easy to transfer the information.
Remember, there are things that we can do as "civilians" for policy
enforcement that police can't do without warrants and support from the
local DA's office.  However, once the case is turned over to Law
Enforcement, you become an agent for them so, you have to follow the
same rules as law enforcement for the remainder of the case.

So, word of advise:  Get to know your law enforcement.  Get names and
contact information.  Talk to them on how they handle evidence, and
where to draw the line at transferring the case to them.

-Frank

------------------------------------------------------------------
Frank J. Piscitello, Jr. 
Information Security Manager    
Office of Information Security
West Chester University of PA
http://www.wcupa.edu/infoservices/security/

Security is everyone's responsibility.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.