Re: [EXTERNAL] Re: [SECURITY] [EXT] Re: [SECURITY] student systems and NIST 800-171

[Brian Amstutz <brian.amstutz () ASBURYSEMINARY EDU>]

Please add me to the working group

Brian
-- 
Brian Amstutz
Director of Administrative Technology
Library, Information, and Technology Services
Asbury Theological Seminary


On Mon, Feb 8, 2021 at 10:52 AM Karen A Bell (kbell) <kbell () memphis edu>
wrote:

> Please add me to the working group.
>
> Karen Bell
> Director | IT Security and Identity Management
> Information Technology
> The University of Memphis
> 152 Administration Building
> Memphis, TN 38152
> 901.678.4274 | kbell () memphis edu
>
>
>
>
>
>
>
> ------------------------------
> *From:* The EDUCAUSE Security Community Group Listserv <
> SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Mavour, Monique A <
> mmavour () MOCS FLSOUTHERN EDU>
> *Sent:* Monday, February 8, 2021 7:51 AM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
> *Subject:* Re: [SECURITY] [EXTERNAL] Re: [SECURITY] [EXT] Re: [SECURITY]
> student systems and NIST 800-171
>
> CAUTION: This email originated from outside of the organization. Do not
> click links or open attachments unless you recognize the sender and trust
> the content is safe.
>
> Hello All,
>
> I am interested in being added to the group as well
>
> Thank you,
> Monique Mavour
> IT Project Manager
> Florida Southern College
>
>
> On Feb 2, 2021, at 6:29 PM, Dan Wasson <dan () nmc edu> wrote:
>
> 
>
> CAUTION: This email originated from outside your organization. Exercise
> caution when opening attachments or clicking links, especially from unknown
> senders.
> I would be interested in the working group.
>
>
> *Dan Wasson*
> *Director Systems & LAN Management*
> *Northwestern Michigan College*
> *231-995-1164*
> *dwasson () nmc edu <dwasson () nmc edu>*
>
> *Don't be a scam victim - NMC and other reputable organizations will never
> use email to request that you reply with your password, social security
> number or confidential personal information.*
>
>
> On Tue, Feb 2, 2021 at 5:45 PM Ricardo Fitipaldi <rfitipal () sdsu edu>
> wrote:
>
> Please include sdsu.edu
> <https://protect-us.mimecast.com/s/4bT2Czp5wPhryKQh4JLgR?domain=linkprotect.cudasvc.com>
> in the working ground.
> Sincerely,
> Ricardo Fitipaldi
> IT Security Office | Interim Information Security Officer
> *San Diego State University *| sdsu.edu
> <https://protect-us.mimecast.com/s/CnjiCADoYquRPjLI8HCnm?domain=linkprotect.cudasvc.com>
> (619)-594-0099
>
>
> Get Duo, Stay Protected.
> Learn More at the IT Security Duo MFA
> <https://protect-us.mimecast.com/s/wnczCBBpYohnkvpcN1gEA?domain=linkprotect.cudasvc.com> page
> | @SDSUITSO
> <https://protect-us.mimecast.com/s/QeYCCDkrVNfxWXNhZGCCd?domain=twitter.com>
>
>
>
> On Fri, Jan 29, 2021 at 5:43 AM Harry Hoffman <hhoffman () ip-solutions net>
> wrote:
>
> We're just starting to look into this among a broader effort around
> compliance. I'd be interested in what other are doing or forming an
> interest/working group if there's enough folks keen to do so.
>
> Cheers,
> Harry
>
>
> On Thu, Jan 28, 2021 at 11:35 AM Fugett, Julie C <jcf () ku edu> wrote:
>
> Is anyone aware of templates, checklists, or other guidance around
> performing this self-assessment? I just watched Mia Jordan’s talk from the
> 2020 Virtual FSA training conference and while the talk was informative,
> she didn’t provide any resources or a timeline for the self-assessment
> process. I’m reaching out to the contact email in the slides, but I’m
> wondering if I’ve missed something somewhere along the way.
>
>
>
> ______________________________________
>
> Julie C. Fugett, CISSP
>
> Chief Information Security Officer
>
> KU Information Technology
>
> The University of Kansas
>
> Email jcf () ku edu
>
> Mobile +1 785 691 9023
>
> Office +1 785 864 0490
>
> *She/Her/Hers*
>
>
>
>
>
>
>
> *From:* The EDUCAUSE Security Community Group Listserv <
> SECURITY () LISTSERV EDUCAUSE EDU> *On Behalf Of *Ross Mukai
> *Sent:* Wednesday, January 27, 2021 6:10 PM
> *To:* SECURITY () LISTSERV EDUCAUSE EDU
> *Subject:* Re: [SECURITY] student systems and NIST 800-171
>
>
>
> Some slides from the 2020 student aid conference describing a compliance
> framework for glba + CUI
>
> The bullet points on the near-term plan on pg 18 include the 12/18/20
> letter and self-assessments
>
>
> https://fsaconferences.ed.gov/conferences/library/2020/2020FSAConfSessionBO15.pdf
> <https://protect-us.mimecast.com/s/RfpqCERvVOcqzBVsZEnGv?domain=nam10.safelinks.protection.outlook.com>
>
>
>
> On Wed, Jan 27, 2021 at 2:01 PM Sam Horowitz <samh () ucsb edu> wrote:
>
>
> https://ifap.ed.gov/electronic-announcements/121820CybersecurityProtectStudentInfoComplianceCUInGLBA
> <https://protect-us.mimecast.com/s/hCM7CG6xVnu8PwKi0GhaN?domain=nam10.safelinks.protection.outlook.com>
>
>
>
> -------------------------------------------
> Sam Horowitz, CISSP, CISM
>
> *Chief Information Security Officer*
>
> he/him/his
>
> Office: (805) 893-5005
> Email: samh () ucsb edu
>
>
>
>
>
> On Wed, Jan 27, 2021 at 3:38 PM Alex Jalso <ACJalso () mail wvu edu> wrote:
>
> Hello Everyone,
>
>
>
> In a meeting with peer institutions it was said that at the Federal level
> there’s been discussions that university student information systems must
> treat resident data as CUI and have their systems be compliant with NIST
> 800-171 or risk losing financial aid.  Has anyone heard something similar
> to this or received communications about it?
>
>
>
> Alex
>
>
>
> Alex Jalso, PMP, CISM, CDPSE
>
> Chief Information Security Officer
>
> Information Technology Services
>
> West Virginia University
>
> p: 304-293-4457
>
>
>
> *Defend your data.* ITS will *NEVER* ask you for your WVU Login
> credentials, Social Security number or credit card information via email.
> *NEVER* click on suspicious email links or attachments, even those that
> appear to be from a legitimate source. Hover over links to see where they
> really lead before clicking on them. When in doubt, contact
> DefendYourData () mail wvu edu.
>
>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://protect-us.mimecast.com/s/eNZTCJ6A9Dun2x3cp2TKv?domain=nam10.safelinks.protection.outlook.com>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://protect-us.mimecast.com/s/9TpXCKrBVXu1YLzTnnN3L?domain=nam10.safelinks.protection.outlook.com>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://protect-us.mimecast.com/s/9TpXCKrBVXu1YLzTnnN3L?domain=nam10.safelinks.protection.outlook.com>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://protect-us.mimecast.com/s/acb4CL9DV6u3gLys1O-wB?domain=linkprotect.cudasvc.com>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://protect-us.mimecast.com/s/ATE3CM8gVDhJLjMTRLGmx?domain=linkprotect.cudasvc.com>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://protect-us.mimecast.com/s/gS3gCNkj6Df6QoDi9vuP9?domain=linkprotect.cudasvc.com>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://protect-us.mimecast.com/s/qOORCOYk0luOg3zTJ1s-i?domain=linkprotect.cudasvc.com>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> <https://protect-us.mimecast.com/s/q_tDCPNlVms62Q8iVmyor?domain=educause.edu>
>
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community