· Talked about the new office software
Becoming more imperative, at least on the
academic side, that we need to move up to the new version
The new version of the Office software is
not backward compatible
There is a converter that came out – located
on the Mactopia site
Sharon will see that the link gets set out
to committee members
The converter doesn’t do a complete job in
the sense that you don’t get all the 2007/2008 functionality
Students are coming to school with documents
that were created in Office 2007/2008, and are unable to open them and
print
· Talked
about the Meeting Maker incompatibility with the new Mac OS Leopard
Talked about putting Parallels on the computers
until a decision could be made whether to go with the newer version of
Meeting Maker, that’s coming out in June, or wait to see what calendaring
comes with Banner
If we upgrade Meeting Maker, we have to update
everyone at the same time
The browser version works, but people don’t
like it
· Had
a discussion on multimedia standards and training faculty and staff on
how to use the multimedia equipment
Possibly creating a training video
Duncan ask if the smart stations could be
created in such a way that there is no need for training
Currently there is a cheat sheet at every
station
There should be a label on the cables
Are trying to make them as user friendly
as possible
If anyone goes into one of these rooms and
something isn’t clear and you have suggestions of how to improve it, short
of replacing all the equipment, let ETS know
· Talked
a lot about being green
Going to add a duplex printer to the standards
sheet as an option
· Apple
is going to change their processor speed on the iMac from 2.0 to 2.4
· Scott wanted to complement the more secure classrooms,
which seem to have cut down on the number of thefts
· Fred
went through the document piece-by-piece
Made a lot of changes since the last iteration,
based upon the discussion at the last ETAC meeting; comments from Jeanine
Hawk; as well as comments from Ron Levine
For any typo errors, send them to Fred in
an e-mail
· Third
paragraph under Purpose (p1) was added to very clearly differentiate the
type of personal information that doesn’t require protection or notification
Added the table beneath to explain, given
the three areas of personal information we have, how each of the areas
is handled
· A3
(p2) added to provide parallel language with the previous statements
· F (p2) Computer-Based Information System Manager (CBIS
Manager)
Previously read Systems Manager – Jeanine
suggested to prevent confusion that it be changed to read a Computer
Information Systems Manager
Also added that each employee who is assigned
a desktop or laptop computer, will be their own CBIS manager for that computer
· G
(p2) this item wasn’t there at all
Had been accidentally dropped off an earlier
iteration and was added back on
· I
(p3) Changed from Lead College Authority to Lead Authority
We have a lead authority for each of the
colleges as well as central services
· K
(p3) ETS Incident Response Team - another area that has been added
Later, in the document, identify each group
or person that is involved in the process
A team of folks who investigate and respond
to security incidences
· Responsibilities A (p3)
The 5th bullet - a clarification
was put in based upon Jeanine Hawk’s suggestion
Last bullet – added the particular
law that pertains to this bullet
· B
(pp3-4) added an additional bullet to explain what to do before sending
a server out to be salvaged or repurposed, if it contains personal data
David Gillett will send Fred some new language
for this bullet
Fred will go back to F (p2) and review the
language pertaining to the CBIS Manager
· Incident
Response Process A (pp4-5) – added the last sentence on the first
paragraph
Second paragraph – talks about what
you do when you find out you have had a problem on a computing system
Added a paragraph of what do to if a stolen
computer is recovered
· B
(p5) specifies who needs to be contacted
Added a statement that says who should be
contacted if the breach is noticed after work hours
After some discussion it was decided to not
only list the contact numbers in the appropriate location(s) in this document
but to also put them in a box at the very front of the policy as well
· C
(p5) explains who will analyze the breach
· D
(p5) included district police and CBIS manager
· E
(p5) included district police and CBIS manager in the process
It was agreed to remove the word internal
from the bullet following the first sentence in section E
· (p7)
made some changes to the first two bullets, at the top of the page, pertaining
to the recipients of the After Notification Report
· At
this point Fred ask if the document was close enough, with the minor changes
to be made, to consider the document ratified by the ETAC committee and
ready to go into the governance cycle
The motion was moved and seconded by Scott
The motion was passed unanimously
· Fred has been working on the policy to go with the
procedures and will send it out to all committee members for review
Fred will make the minor changes to the procedures
and send it out to the committee as well
Will do a final review at the next ETAC meeting
and then begin working on a 508 compliance policy