Re: Securing Financial Aid Docs

["Sherwin, Zachary A" <zsherwin () BERRY EDU>]

Hi,

We use a document management system called “Feith” (https://www.feith.com/); we host our Feith environment locally. 
Candidates can upload to the system, but firewall rules prevent documents from being retrieved. (To say that another 
way—candidates can upload documents to our secure server, but cannot retrieve them once uploaded). Documents are stored 
in an encrypted format on internal servers, and are unencrypted when authenticated users go through the Feith 
application to view documents. We haven’t turned on the option to see who’s viewing documents, but we do log all 
actions taken on documents (such as routing them to different staff queues for processing).

Hope that helps,

Zach

Zach Sherwin
Assistant Director, Enterprise Systems
Berry College


From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> On Behalf Of Hiram Wong
Sent: Wednesday, January 22, 2020 3:59 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Securing Financial Aid Docs


CAUTION: This email originated from outside of the Berry College organization. Do not click links or open attachments 
unless you know the content is safe. Email infosec () berry edu<mailto:infosec () berry edu> if in doubt.
Hi All,

We are curious as to how other campuses are securing Financial Aid documents (i.e., document level encryption, network 
controls, logging, audits)?  Thanks!

Hiram

--
[eSig Logo]
Hiram Wong, CISA, CISM
Internal Audit
2411 West 14th Street, Tempe AZ 85281
phone | 480-731-8827
email | @domail.maricopa.edu<mailto:@domail.maricopa.edu>
website | https://www.maricopa.edu<https://www.maricopa.edu/>
[eSig facebook]<https://www.facebook.com/maricopa.edu>[eSig twitter]<https://twitter.com/mcccd>[eSig 
linkedin]<https://www.linkedin.com/company/maricopa-community-colleges>[eSig 
youtube]<https://www.youtube.com/user/themcccdEDU>[eSig instagram]<https://instagram.com/maricopacc/>

[facebook]<http://www.facebook.com/maricopa.edu>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community