<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Computing@Thayer &#187; Security</title>
	<atom:link href="http://computing.thayer.dartmouth.edu/blog/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://computing.thayer.dartmouth.edu</link>
	<description>The blog of your Friendly Computing Services Team</description>
	<lastBuildDate>Thu, 15 Oct 2009 19:54:48 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Enforcing Data Security Policies: one approach</title>
		<link>http://computing.thayer.dartmouth.edu/blog/2008/11/01/enforcing-data-security-policies-one-approach/</link>
		<comments>http://computing.thayer.dartmouth.edu/blog/2008/11/01/enforcing-data-security-policies-one-approach/#comments</comments>
		<pubDate>Sun, 02 Nov 2008 01:28:03 +0000</pubDate>
		<dc:creator>dricker</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[educause2008]]></category>

		<guid isPermaLink="false">http://computing.thayer.dartmouth.edu/?p=222</guid>
		<description><![CDATA[Choosing which sessions &#038; presentations to attend at a conference like EDUCAUSE is a bit like being led to a table for dinner set with 20 times more food than you can eat.
And each dish is hidden underneath a towel.
And written on the towel is only the broad food group that the meal underneath belongs [...]]]></description>
			<content:encoded><![CDATA[<p>Choosing which sessions &#038; presentations to attend at a conference like EDUCAUSE is a bit like being led to a table for dinner set with 20 times more food than you can eat.</p>
<p>And each dish is hidden underneath a towel.</p>
<p>And written on the towel is only the broad food group that the meal underneath belongs to: Meat, Grain, Pudding &#8212; I&#8217;m pretty sure pudding is a food group, no?</p>
<p>And you aren&#8217;t really looking at the actual dishes, but a black &#038; white photograph of them. And . . . well, you get the idea.</p>
<p>So when it comes time to actually eat the meal you&#8217;ve chosen, sometimes it doesn&#8217;t taste quite as you&#8217;d envisioned. And this isn&#8217;t always a bad thing.</p>
<p>Take the Tuesday afternoon session titled simply <em>Information Classification</em>. The paragraph description promised a tale of how Prince George&#8217;s Community College in Maryland undertook the process of classifying and assigning security rights to all data gathered and maintained by the school.</p>
<p>Not quite heart-quickening stuff. But I was intrigued enough by the daunting scope of such a thing to want to hear more. Also I was curious to see how relevant the take-away would be to Thayer&#8217;s own data security efforts. So I tucked in . . .</p>
<p>Ajay Gupta, the Director of Security at PGCC, is engaging and funny, and spoke quite eloquently about their mammoth endeavor with a deep grasp on subtle (&#038; not so) implications that are inherent in applying a rational order to chaos and madness.</p>
<p>Amazingly they did it. &#038; he showed the spreadsheet to prove it. Wow. Lots and lots of data records to classify, let me tell you.</p>
<p>But he said something very interesting during the question session. He had talked a lot of the classifying and assigning ownership and abstract access rights, but almost nothing on enforcing the policies. What were the plans and tools in play for this brass-tacks part of the whole affair? Because for me, as primarily technical &#038; support-focused, this was the filling of the pie. Yes, I am very dessert-driven.</p>
<p>His answer was short: &#8220;We&#8217;re not allowing any data to reside outside of the ERP system.&#8221;</p>
<p>I swear I could hear the needle slide off the phonograph.</p>
<p>Oh well. So much for my dessert.</p>
<p>By the way, just what the heck is an ERP system anyway? (Kidding!)</p>
]]></content:encoded>
			<wfw:commentRss>http://computing.thayer.dartmouth.edu/blog/2008/11/01/enforcing-data-security-policies-one-approach/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
