Re: student systems and NIST 800-171

[Ross Mukai <rossmuka () HAWAII EDU>]

Some slides from the 2020 student aid conference describing a compliance
framework for glba + CUI
The bullet points on the near-term plan on pg 18 include the 12/18/20
letter and self-assessments
https://fsaconferences.ed.gov/conferences/library/2020/2020FSAConfSessionBO15.pdf

On Wed, Jan 27, 2021 at 2:01 PM Sam Horowitz <samh () ucsb edu> wrote:

> https://ifap.ed.gov/electronic-announcements/121820CybersecurityProtectStudentInfoComplianceCUInGLBA
>
> -------------------------------------------
> Sam Horowitz, CISSP, CISM
> Chief Information Security Officer
> he/him/his
> Office: (805) 893-5005
> Email: samh () ucsb edu
> [image: UC Santa Barbara]
>
>
> On Wed, Jan 27, 2021 at 3:38 PM Alex Jalso <ACJalso () mail wvu edu> wrote:
>
> > Hello Everyone,
> >
> >
> >
> > In a meeting with peer institutions it was said that at the Federal level
> > there’s been discussions that university student information systems must
> > treat resident data as CUI and have their systems be compliant with NIST
> > 800-171 or risk losing financial aid.  Has anyone heard something similar
> > to this or received communications about it?
> >
> >
> >
> > Alex
> >
> >
> >
> > Alex Jalso, PMP, CISM, CDPSE
> >
> > Chief Information Security Officer
> >
> > Information Technology Services
> >
> > West Virginia University
> >
> > p: 304-293-4457
> >
> >
> >
> > *Defend your data.* ITS will *NEVER* ask you for your WVU Login
> > credentials, Social Security number or credit card information via email.
> > *NEVER* click on suspicious email links or attachments, even those that
> > appear to be from a legitimate source. Hover over links to see where they
> > really lead before clicking on them. When in doubt, contact
> > DefendYourData () mail wvu edu.
> >
> >
> >
> > **********
> > Replies to EDUCAUSE Community Group emails are sent to the entire
> > community list. If you want to reply only to the person who sent the
> > message, copy and paste their email address and forward the email reply.
> > Additional participation and subscription information can be found at
> > https://www.educause.edu/community
> **********
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community