Re: Security policies for student workers

[Thomas Carter <tcarter () AUSTINCOLLEGE EDU>]

They don’t go through HR and differ from traditional employees in a number of ways. I don’t know of any policy outside 
of IT that explicitly states that they are in the same category as traditional employees.

Thomas Carter
Network & Operations Manager
Austin College

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Barton, 
Robert W.
Sent: Tuesday, March 15, 2016 9:33 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Security policies for student workers

Did that pass the legal sniff test?  We are having the same debate here, since they are not paid fully by the 
University.  Historically, they have been put in a different category here.

Robert W. Barton
Director of Information Security
Lewis University
One University Parkway
Romeoville, IL  60446-2200
815-836-5663

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Andregg, 
Bryan Courtney
Sent: Tuesday, March 15, 2016 9:29 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Security policies for student workers

Student workers are employees at UNC-CH. All appropriate policies apply. More broadly, our policy and standards 
language clarifies that they apply in all cases where individuals interact with university information and/or systems 
regardless of personnel or end-point type.
--
Bryan C. Andregg
IT Security and Systems Manager
Instructional and Information Systems
UNC Gillings School of Global Public Health

From: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> on behalf of Brad Judy <brad.judy () CU EDU<mailto:brad.judy () CU EDU>>
Reply-To: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>>
Date: Tuesday, March 15, 2016 at 10:12 AM
To: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE 
EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: Re: [SECURITY] Security policies for student workers

I’m confused by the statement “not being employees”.  Why wouldn’t student workers fall under all of the same policies 
as other employees?

Brad Judy

Information Security Officer
Office of Information Security
University of Colorado
1800 Grant Street, Suite 300
Denver, CO  80203
Office: (303) 860-4293
Fax: (303) 860-4302
www.cu.edu<http://www.cu.edu/>

[cu-logo_fl]

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas 
Carter
Sent: Tuesday, March 15, 2016 7:59 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Security policies for student workers

Do you have specific security policies for student workers (work study, etc)? Do you have specific policies about the 
use of personal computers used by student workers? Can you point me to these policies or send me a copy?

I’m trying to better define policies for student workers as they fall into a gray area of not being employees and not 
being just students. Their work may require access to resources that are restricted from normal students. Additionally, 
as a small school, we have some student workers using personal computers to do their work. Primarily artistic work 
(graphic design, video editing, etc), but this sharing on student-owned devices worries me somewhat.

Thomas Carter
Network & Operations Manager
Austin College


This message (including any attachments) is intended only for the use of the individual or entity to which it is 
addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from 
disclosure under applicable law or may constitute as attorney work product. If you are not the intended recipient, you 
are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. 
If you have received this communication in error, notify us immediately by telephone at (815)-836-5950 and (i) destroy 
this message if a facsimile or (ii) delete this message immediately if this is an electronic communication. Thank you.