SSN Conversion

[Chad McDonald <chad.mcdonald () GCSU EDU>]

Our project manager has some questions regarding SSN conversion.

> Regarding Student ID Conversion from using the student's SSN
> as the ID to using a system generated ID:
>
> What techniques did you use to facilitate the conversion of
> the many miscellaneous data stores (spreadsheets, Access
> databases, etc.) that exist throughout your campus?

We are looking strongly at 2 scenarios:
Provide a file with SSN and New ID (no other information at all would be in
the file) for administrators of ad hoc databases & spreadsheets.  This would
be accompanied by user education as well.  The file would be on CD.  CD's
would be numbered and signed for with agreement not to duplicate or
communicate data in any fashion.  Once conversion is complete, CD's would be
retrieved.

OR

Create a secure website for individual SSN / ID lookups.

Do you see major security concerns with either approach, given that we have
to accommodate these administrators?


Chad McDonald, CISSP
Chief Information Security Officer
Georgia College & State University
Office   478.445.4473
Cell     478.454.8250
Fax      478.445.1202