University Business - September 2012 - (Page 37)

sponsored supplement Eric Hawley CIO Utah State University Logan, Utah 16,000 students us. On the positive side, this event caused us to significantly revise our institutional privacy policy, involving representatives from our IT, general counsel, marketing, faculty, and compliance departments. That went well, but we need to expand and write more policies that way. If your users can’t find a way to do what they want under your policies, they’ll find a way to go around you and then plead ignorance when something bad happens. How have you changed your IT security to deal with mobile devices? Frank Cervone, Purdue University Calumet: We have a policy at the university system level of not providing devices, but instead providing a stipend for faculty and staff to purchase their own. We’ve had some issues with that, because there are some applications we’ve created specifically so that they can’t be used with a mobile device. We’ve also set up a virtual machine environment, where we deliver software to the devices, and any protected data cannot be downloaded. But, we’re still at the beginning stages. We’ve been very fortunate to be able to work together in the Purdue University system to develop these policies. Throughout the year at various campus leadership events, we remind people of our policies and remind them of their responsibilities. We remind everyone that, in fact, they are responsible for data breaches that occur as a result of their actions, and the university will hold them liable in many respects. Tim Ferguson, Northern Kentucky University: We’re working on several fronts regarding security. Like other institutions here, we’re also in the process of converting to a stipend approach for devices for faculty and staff, and we’re working through the issues that come up because we no longer own the devices. We’re trying to address those with new policies. Another initiative we’ve undertaken is a security audit, with an outside firm reviewing all of our technology infrastructure and policies. We’ve done this in the past, universitybusiness.com but for the first time, we’re including mobile devices in that security audit, so we’re eager to find out where we stand. We still have an environment where, if you have a smartphone but are not connected into our private network, you won’t have access to our critical systems. But, we think that policy may have to change, as well. Richard Anderson, Tidewater Community College: In the past year, we’ve seen growing demand for iPads, as well as for mobile access to data on our college network. But before I open it up and provide more access, we need to develop more comprehensive mobile policies, particularly about security. To me, students are not as much of a concern when it comes to security; they are mainly accessing their own information. Faculty and staff are a different story, because they have access to much more sensitive information on our college network, data that affects far more people. So security is a big concern, and we hope to address that at least in part with developing clear mobile device acceptable use policies. Richard Anderson Vice President of Information Services Tidewater Community College Norfolk, Virginia 31,000 students September 2012 | 37 http://www.universitybusiness.com

Table of Contents for the Digital Edition of University Business - September 2012

University Business - September 2012
Contents
Editor’s Note
College Index
Ad Index
Behind the News
Viewpoint
Independent Outlook
Financial Aid
Virtual Viewbooks: Ready? Or Not?
Technology Changes Everything
Connecting Learners, On Campus and Off
The Changing Face of the CIO
Efficiency Greats
The Administrator's Bookshelf
Oceans of Data
Education Innovators
Internet Technology
End Note

University Business - September 2012