Re: Change of address procedures?

["Witmer, Robert" <r.witmer () SNHU EDU>]

Thanks Daniel,
I too thought about the financial service companies and their processes for change of address requests.  However, our 
educational environment promotes less stringent controls and creates an opportunity for unmonitored activity as far as 
the student's address is concerned.  That in itself is not a big problem (or is it?).   Coupled with a request as 
suggested by Allison, and it appears to fly in the face of the Red Flags Rule.

Do others have an opinion on this?
Regards,

Bob
r.witmer () snhu edu

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Sarazen, 
Daniel
Sent: Thursday, December 18, 2008 10:35 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Change of address procedures?

FYI,

Many companies in the Financial Service Industry send postcards confirming the address change to the old address, 
assuming that the recipient will inform them if something odd is going on.

[cid:image001.gif@01C96100.82DC26D0]

:: Daniel Sarazen, Information Technology Auditor
:: University Internal Audit
:: University of Massachusetts President's Office

:: 508-856-2443
:: 781-724-3377 Cell
:: 508-856-8824 Fax
:: Dsarazen () umassp edu<mailto:Dsarazen () umassp edu>

University of Massachusetts : 333 South St. : Suite 450 : Shrewsbury, MA 01545 : 
www.massachusetts.edu<http://www.massachusetts.edu/>


________________________________
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Allison 
Dolan
Sent: Thursday, December 18, 2008 10:08 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Change of address procedures?

Because of the Red Flag implications, we are looking at address changes that might be linked to a request for a new ID 
card (which can act as a type of debit card) and we might have process changes in that case.  Your query has prompted 
me to think more more broadly.  (In general, we encourage individuals to maintain their address info via the student 
information system web form)


Allison F. Dolan
Program Director, Personally Identifiable Information
Massachusetts Institute of Technology
77 Massachusetts Ave  NE49-3021
Cambridge MA 02139-4307
Phone: (617) 252-1461
http://mit.edu/infoprotect





On Dec 18, 2008, at 9:37 AM, Witmer, Robert wrote:

Hi All

We are reviewing our procedures for student record address changes (undelivered mail, walk-ins/phone calls to update 
records, etc).  Would you share how your institution handles this process?  Will it change based on the Red Flags Rule 
requirements?
Thanks,
Bob Witmer
r.witmer () snhu edu<mailto:r.witmer () snhu edu>