|
|
| |
ETAC Committee
 |
 |
December 10, 2008 Minutes |
 |
| |
EDUCATIONAL
TECHNOLOGY ADVISORY
COMMITTEE
December
10, 2008
ATTENDEES: Don Dorsey, Rich Hansen,
Anson Lee, Drake Lewis, Kent McGee, Sherri
Mines, Judy Mowrey, Fred Sherman, Alex Swanner, Tim Woods
GUESTS: Sharon Luciw, Chien Shih,
David Gillett
Convened: 12:35pm
1. INTRODUCTIONS (ALL)
2. APPROVAL OF THE MINUTES
(Fred)
- Will stand approved as
posted
3. GENERAL NEWS (ALL)
- Higher Education Opportunity Act
- Have
started planning for the new data center - located on the Foothill campus, near
the district building
- Wireless deployment is in the hands of
the colleges
- Rich ask about the implementation of
on-line grade submission
4. CAPTURE (Chien)
- The ATM bank card –
from ETS' point of view, have finished the study and estimation of the project
schedule and cost
The business office is in the process of negotiating
a contract with US Bank
Once negotiations are complete, will be able to
begin implementation using the current Capture card technology
Projected to begin the end of February, by bringing
Foothill up first
De Anza has a sub-clause in a separate contract with
US Bank that requires them to have an on-site banking branch set up in their
office
This contract still has some final points that need
to be negotiated
Installation of the ATM card will probably not take
place until June
ETS would like to implement on both campuses at the
same time
- Next
project is to set up a terminal in the student activity centers and several
other locations to be able to track the payment of student fees and access of
campus services (Will not be able to use on copy machines)
Have done an initial study, have a budget estimate
ready ($80K) and the time frame needed to implement the project (16 weeks)
Requires the purchase of software, to be integrated
with the current student information system, the installation of a database to track
all the Capture card uses and to set up all the terminals (26)
5. EIS STATUS (Chien)
- All
information provided about the EIS project can be found on the EIS website: www.fhda.edu/eis
- The key milestones achieved through September and
October are:
- Major
milestone achieved in the November time frame was to set up the outer ring of
access to the core EIS application, which includes the portal layer
- During
the December and January time frame will be looking at the strategy of how to
do our reporting from the users point of view and how to generate the data
warehouse and state chancellors report
- Over
the next six months the Information Systems Group:
- The
EIS project is currently on schedule, and on budget
- About
80% of all the modules we purchased have been installed
6. SECURITY AUDIT STATUS (Chien)
- Anticipate the project to be complete by the end of January
2009
Already have the schedule out
- Had the initial kick off meeting
- The consultant is fully engaged
They will be coming onto campus to interview different
department employees from January 6th thru January 23rd
Anticipate a report shortly after the interviews
Will pass the draft report to the committee for
review
Outcome of the audit:
1) What is the security
ramification of how we keep the data?– will have the consultants
interview Fred Sherman about copyright infringement so it can be included in
the audit
Primary objective is to look at how we safe keep the
data; who has access of the data; how data gets transported from one department
to another; where is the security hold in the transportation of data and maintenance
of data access
2) Will report
to the audit and finance committee – a high level report that informs
them that this process is going on and the general findings
- Hoping to incorporate into the Banner implementation so we
can plug any holes in our security
As we implement Banner security roles (i.e. if you
have a particular position, you will have access to certain types and amounts
of data) will be put in place
- The audit itself will probably not effect a lot of people
Will affect people who handle dataETS internally mapped out all the data flow from our
main system to the approximate 36 substrings we support
- When we pass data down to ancillary systems, like Liquid Office
or Touchnet, or any other programs that lie outside Banner that we are going to
be supporting we want to know how they protect the data (Is the data encrypted?)
Our concern is with personal identity information
– don't want this information easily accessed by people who don't have a
need to know it
Both a combination of electronic controls and
procedures and policies by which people access the data and what they do with
the data as well as who gets access to itComprehensive study about how data flows through the
organization from system to system, who gets it, what do they do with it and
how is it kept safe
The reports will come out with a scope that will provide a
recommendation as to how we will establish the Banner security model
At the same time did an internal study of how we are
going to merge the identity information with the campus though our identity
management system using the Banner internal security model
The first implementation of the security model will
be before the finance module goes live
There has been a recent change to FERPA (Family Education
Rights & Privacy Act) – a federal law that defines several categories
of student information that are considered to be private and being private,
federal law requires that schools not disclose this information unless it is
authorized by the person
The student ID number is no longer considered to be
as protected as it was before when getting access into confidential, privileged
information, as long as you use some other kind of control with it like a pass
word or pin number, for this reason it falls out of the protected category
In January, Fred will revisit the issue of weather
or not we want to change how we handle the student ID number on the campuses as
defined in the Electronic Information Security Procedure
We are currently more strict than the law requires
It is the address or phone number, not the student
ID that is currently protected, but having the two in combination constitutes a
FERPA problem
Having the student ID alone is no longer a protected
area according to FERPA
The laws that we are under with regard to regular
employees are, for the most part, California laws
7. FUTURE AGENDA ITEMS (ALL)
- None
were brought forward
8. ADJOURNMENT
Next Meeting: Wednesday, January 14, 2009,
via video conferencing
|
|
| |
Last Updated: Tuesday, January 13, 2009 at 5:51:14 PM ©2009 Foothill-De Anza Community College District
|
|
|
|