EDUCAUSE | Policy and Law: Federal

DNSSEC Notice of Inquiry

vvogel — Fri, 10 Oct 2008 09:41:12 -0500

The National Telecommunications and Information Administration (NTIA) is inviting comments regarding Domain Name and Addressing System Security Extensions (DNSSEC) implementation at the root zone. Comments are due on November 24, 2008. EDUCAUSE and Internet2 are planning to prepare joint comments so your input is welcome. Below are a few additional resources:

Notice of Inquiry to Examine Security of the Domain Name and Addressing System

Rodney — Thu, 09 Oct 2008 18:14:34 -0500

The National Telecommunications and Information Administration, of the U.S. Department of Commerce, has issued a Notice of Inquiry (NOI) regarding “Enhancing the Security and Stability of the Internet’s Domain Name and Addressing System”. The NOI begins with the following background:

The Department of Commerce (Department) notes the increase in interest among government, technology experts and industry representatives regarding the deployment of Domain Name and Addressing System Security Extensions (DNSSEC) at the root zone level. The Department remains committed to preserving the security and stability of the DNS and is exploring the implementation of DNSSEC in the DNS hierarchy, including at the authoritative root zone level. Accordingly, the Department is issuing this notice to invite comments regarding DNSSEC implementation at the root zone.

The NOI seeks comments in response to the following general questions:

In terms of addressing cache poisoning and similar attacks on the DNS, are there alternatives to DNSSEC that should be considered prior to or in conjunction with consideration of signing the root?
What are the advantages and/or disadvantages of DNSSEC relative to other possible security measures that may be available?
What factors impede widespread deployment of DNSSEC?
What additional steps are required to facilitate broader DNSSEC deployment and use?
What end user education may be required to ensure that end users possess the ability to utilize and benefit from DNSSEC?

The NOI also contains a set of general and operational questions concerning signing of the root zone. A number of possible models exist to implement the signing of the root zone. Accordingly, six possible process flow models are presented in Appendix A for consideration and comment.

Comments are due on November 24, 2008. Comments will be posted on NTIA’s website at http://www.ntia.doc.gov/DNS/DNSSEC.html. EDUCAUSE and Internet2 are planning to prepare joint comments and welcome member input. Please send comments to Rodney Petersen at rpetersen@educause.edu

Enhancing the Security and Stability of the Internet’s Domain Name and Addressing System: Notice of Inquiry

ckeller — Thu, 09 Oct 2008 10:01:00 -0500

Federal Register notice of inquiry concerning DNSSEC. The Department of Commerce (Department) notes the increase in interest among government, technology experts and industry representatives regarding the deployment of Domain Name and Addressing System Security Extensions (DNSSEC) at the root zone level. The Department remains committed to preserving the security and stability of the DNS and is exploring the implementation of DNSSEC in the DNS hierarchy, including at the authoritative root zone level. Accordingly, the Department is issuing this notice to invite comments regarding DNSSEC implementation at the root zone.

Comments are due on November 24, 2008.

Free EDUCAUSE Webcast 10/22/08 on Identity Theft Rules

Rodney — Wed, 08 Oct 2008 19:26:45 -0500

New federal regulations to address identity theft go into effect November 1, 2008, and are likely to affect colleges and universities in nuanced ways. Compliance will require careful study and collaboration among business officers, human resources, legal counsel, student services, IT, and other affected campus units. The rules require users of consumer reports to develop reasonable policies and procedures to apply when they receive a notice of address discrepancy from a consumer reporting agency. They also require that institutions develop and implement an Identity Theft Prevention Program for combating identity theft in connection with new and existing accounts.

Who is subject to and must comply with the regulations on ID Theft Red Flags and Notices of Address Discrepancy? What business practices at colleges and universities are covered by the rules? What are some of the things that entities subject to the rules must do? What role does IT play in compliance with the rules? What are the penalties for failure to comply? On Wednesday, October 22, from 2-3 p.m. U.S. Eastern Time, EDUCAUSE will host a webcast featuring Naomi Lefkovitz from the Federal Trade Commission (FTC) to address many of these questions and more. For details and connection instructions, visit http://connect.educause.edu/term_view/ID+Theft+Red+Flags. This webcast is open to the public at no charge and no registration is required. It will also be archived and accessible to all.

Brought to you by EDUCAUSE, in cooperation with the American Council on Education (ACE), Coalition of Higher Education Assistance Organizations (COHEAO), College and University Professional Association for Human Resources (CUPA-HR), International Association of Privacy Professionals (IAPP), National Association of College and University Attorneys (NACUA), and the National Association of College and University Business Officers (NACUBO).

Congressional Resolution Urges “Making Data Security A Top Priority”

Rodney — Tue, 07 Oct 2008 14:06:49 -0500

Citing that “the number of data security breaches at colleges and universities increased over 67 percent from 2006, and the number of educational institutions affected increased over 72 percent”, H. Con. Res. 425 was submitted as a concurrent resolution expressing the sense of Congress of “the need to pass meaningful legislation to protect commercial and government data from data breaches.” While the reported aim is to protect “commercial and government data”, the resolution acknowledges that data breaches occur in a wide range of institutions, including government, military, education, health care companies, banking, and credit and financial services.

The resolution, introduced by Rep. Michael C. Burgess (R-Texas) and Rep. Charles A. Gonzalez (D-Texas), highlights a number of facts to underscore the importance of action before the adjournment of the 110^th Congress. For example:

Cyber crime is a growing international business that presents a fundamental threat to the Internet;
36 States have recognized the threat that data breaches pose and have taken steps to pass their own data security legislation;
The total cost of the data security crisis to business and consumers is approaching $50 billion annually, with the average breach costing a consumer $1,200 and a business $5 million;
87 percent of breaches are considered avoidable if reasonable controls had been in place.

Noting that “solutions to these threats exist in the marketplace for relatively low cost”, the resolution urges leaders “at the top levels of organizations to take an active role in ensuring that their systems are secure.” Furthermore, the resolution urges leaders to “take responsibility” for the data collected and stored within their institution by making data security a top priority within the institution.

A variety of bills have been introduced to create a national security breach notification standard, yet the House and Senate have not agreed upon a version to put forward for the president to sign.

DHS Releases IT Security Essential Body of Knowledge

vvogel — Thu, 02 Oct 2008 10:42:24 -0500

The U.S. Department of Homeland Security (DHS) has published the IT Security Essential Body of Knowledge (EBK). A Glossary of Key Terms used in the EBK is also provided.

According to the overview on the US-CERT website:

The IT Security EBK conceptualizes IT security skill requirements in a new way to address evolving IT security challenges. The EBK characterizes the IT security workforce and provides a national baseline representing the essential knowledge and skills that IT security practitioners should have to perform specific roles and responsibilities.

The EBK was featured in a November 2007 EDUCAUSE Live! presentation when DHS was accepting comments on a draft version of the document.

DHS Releases IT Security Essential Body of Knowledge

Rodney — Wed, 01 Oct 2008 18:38:14 -0500

The U.S. Department of Homeland Security (DHS) has published the IT Security Essential Body of Knowledge (EBK). A Glossary of Key Terms used in the EBK is also provided.

According to the overview on the US-CERT website:

The IT Security EBK conceptualizes IT security skill requirements in a new way to address evolving IT security challenges. The EBK characterizes the IT security workforce and provides a national baseline representing the essential knowledge and skills that IT security practitioners should have to perform specific roles and responsibilities.

The EBK was featured in November 2007 on EDUCAUSE Live! presentation when DHS was accepting comments on a draft version of the document.

Federal Register: ID Theft Red Flags Final Rules and Guidelines

ckeller — Tue, 30 Sep 2008 16:30:16 -0500

The OCC, Board, FDIC, OTS, NCUA and FTC (the Agencies) are jointly issuing final rules and guidelines
implementing section 114 of the Fair and Accurate Credit Transactions Act of 2003 (FACT Act) and final rules implementing section 315 of the FACT Act. The rules implementing section 114 require each financial institution or creditor to develop and implement a written Identity Theft Prevention Program (Program) to detect, prevent, and mitigate identity theft in connection with the opening of certain accounts or certain existing accounts. In addition, the Agencies are issuing guidelines to assist financial institutions and creditors in the formulation and maintenance of a Program that satisfies the requirements of the rules. The rules implementing section 114 also require credit and debit card issuers to assess the validity of notifications of changes of address under certain circumstances. Additionally, the Agencies are issuing
joint rules under section 315 that provide guidance regarding reasonable policies and procedures that a user of consumer reports must employ when a consumer reporting agency sends the user a notice of address discrepancy.

Fair Credit Reporting Act (FCRA) (amended by the Consumer Credit Reporting Reform Act of 1996 and the Fair and Accurate Credit Transactions Act of 2003)

ckeller — Tue, 30 Sep 2008 16:00:22 -0500

Summary of the The Fair Credit Reporting Act, which is a subchapter of the Consumer Credit Protection Act (15 U.S.C. § 1601et seq.) requires employers to advise applicants if employment was denied based on a credit report.

FTC's Red Flag Rule Likely to Affect Colleges

ckeller — Fri, 26 Sep 2008 11:50:19 -0500

NACUBO's brief opinion concerning how the Federal Trade Commission (FTC)'s Red Flags Rule applies to Colleges and Universities as Creditors.

Top 10 Challenges Facing Next Secretary of Homeland Security

Rodney — Wed, 24 Sep 2008 10:46:57 -0500

In anticipation of an administration change following the next presidential election, the Homeland Security Advisory Council has issued a report entitled Top Ten Challenges Facing The Next Secretary of Homeland Security. The report concluded:

Ultimately, homeland security is about synchronizing efforts with multiple partners across the landscape of America. The ability to successfully establish and maintain meaningful partnerships at all levels of government and society for the purpose of securing the homeland may be the greatest, ongoing challenge facing the next Secreatary, as well as his or her successors.

The key challenges and recommendations follow:

#1: Homeland security is more than just a single cabinet Department.
#2: Quickly get an inventory of the Department's commitments and deadlines and work with Congress to achieve a rational system of oversight.
#3: Continue to improve intelligence and information sharing.
#4: Build a cadre of homeland security leadership through a unified national system of training and education.
#5: Build the strong research and development, procurement and acquisition process necessary to support the Department's various missions.
#6: The work of strengthening our Nation's disaster response capabilities is not complete.
#7: Lead the building of a resilient America.
#8: Find the right balance between secure borders and open doors to travelers, students, and commerce.
#9: Improve risk management and risk communications for homeland security.
#10: Sustainability of our Nation's homeland security efforts.

In discussing the role for academia, the report also observes:

Over 200 colleges and universities are now providing degrees in homeland security and related fields. For a homeland security degree to mean something, however, people must know what a homeland security degree means. [The Department of Homeland Security] must lead an effort to align curriculum, develop education standards, define the loose boundaries of the profession, and support the academic foundation of a homeland security education system. The concept of the Homeland Security University System must be expanded to include a systematic, national approach to homeland security education.

Cybersecurity Caucus Created for U.S. House of Representatives

Rodney — Wed, 17 Sep 2008 15:11:56 -0500

Congressman Jim Langevin (Dem.-RI), Chair of the Homeland Security Subcommittee on Emerging Threats, Cybersecurity and Science and Technology, has announced the creation of a House Cybersecurity Caucus. The purpose of this Caucus is to raise awareness and provide a forum for Members representing different committees of jurisdiction to discuss the challenges in securing cyberspace.

“Congress plays a key role in the future of cybersecurity policy,” said Langevin. “Just as this Administration has not spoken with one voice, however, committee jurisdictional squabbles threaten to divide the attention and focus of Congress on these issues. That is why this Caucus is so important.”

Langevin said the caucus "has already received great support from a number of members" and he looked forward to hosting a kick-off event in January.

August 21: EDUCAUSE to Host Free Webcast on P2P Provisions in the Higher Education Reauthorization Act

cluckett — Fri, 15 Aug 2008 15:01:06 -0500

On August 21, at 1:00 p.m. U.S. eastern time, EDUCAUSE will host an hour-long webcast featuring Terry Hartle from ACE discussing the P2P provisions in the recently passed Higher Education Reauthorization Act. For details and connection instructions, visit the EDUCAUSE Connect P2P File Sharing resource page—select the "HEA Webcast" tab under Featured Content.

This webcast is open to the public at no charge, and no registration is required. Afterward, it will be archived and freely accessible.

EDUCAUSE Signs ACE Letter on Higher Education Act (HEA)- Vote Expected Today!

agould — Thu, 31 Jul 2008 07:45:13 -0500

The Higher Education Act (HEA) reauthorization is expected to receive full floor consideration today in Congress. In anticipation of that, EDUCAUSE has joined the American Council on Education and other organizations in sending a letter to lawmakers.

Here is the text:

As you prepare to vote on the conference report to reauthorize the Higher Education Act, I write on behalf of the associations listed below to share our perspectives on this important legislation.

We applaud the provisions in this bill that will help low-income students finance higher education. The bill simplifies the process of applying for student aid and strengthens essential student aid programs that help low-income students, including Pell Grants, Supplemental Educational Opportunity Grants, Perkins Loans, Federal Work-Study, Leveraging Educational Assistance Partnerships (LEAP), TRIO and GEAR-UP. We are especially pleased that the bill affirms that the Department of Education cannot regulate the academic standards of accrediting agencies or institutions of higher education. In tandem with the College Cost Reduction Act of 2007, which cut interest rates, boosted Pell grants and increased federal loan limits, these provisions will make a substantial difference to students, families and institutions.

While this long and complex bill has a number of very desirable provisions, it also has a number of drawbacks. Most notably, it will create an extraordinary number of new reporting and regulatory federal requirements dealing with textbooks, tuition and fees, cost of attendance, alumni activities, foreign gift reporting, fire safety, graduation rates, drug violations, vaccines, and peer to peer file sharing. Although some of these have been made less onerous as the legislative process has proceeded, the total volume of new federal requirements remains considerable.

The bill before you places a particular emphasis on enacting incentives to encourage colleges to hold down tuition charges, an endeavor in which our member institutions are actively engaged. Competing with that goal, however, are the numerous unfunded mandates that will be imposed on colleges and universities. Complying with these requirements will be time-consuming and inevitably will increase administrative and personnel costs on campuses.

The Higher Education Act has played a vital role in helping millions of students realize their dream of a college education and the Congress needs to reauthorize this important act. Colleges and universities remain deeply committed to increasing college access for low-income students and continue to strongly support the partnership with the federal government that has done so much to open college doors over the last half-century. We look forward to working with Congress and the Department of Education to ensure that this partnership is maintained throughout the implementation process.

(END OF LETTER)

EDUCAUSE will be closely tracking today's events in Congress, and providing analysis on the legislation in the near future. Check back with our web site for updates.

EDUCAUSE Signs Letter Urging Congress to Support Pro-Broadband Legislation

cluckett — Fri, 18 Jul 2008 11:07:41 -0500

In a letter delivered this week, EDUCAUSE and several other groups have asked that Congress pass the Broadband Data Improvement Act and the Broadband Census of America Act before the 110th Congress ends. The groups say this legislation "would improve information-gathering about current broadband deployment and assist in targeting resources to areas in need of such services." Learn more, and access a related press release regarding EDUCAUSE’s proposed new approach to making high-speed Internet services available across the country.

EDUCAUSE President Diana G. Oblinger Discusses Need for National Broadband Policy

cluckett — Mon, 07 Jul 2008 16:47:37 -0500

EDUCAUSE President Diana G. Oblinger recently spoke in Washington, D.C., at the New America Foundation–hosted event, Broadband Revolution, about the pressing need for a national broadband policy. Read more about the event and Oblinger’s speech, and access a related press release regarding EDUCAUSE’s proposed new approach to making high-speed Internet services available across the country.

Moving beyond the EDUCAUSE Policy Conference

elilly — Thu, 26 Jun 2008 11:53:25 -0500

The author discusses the evolution of the EDUCAUSE Policy conference and program.

Security Task Force Submits Comments on Proposed FERPA Rules

vvogel — Thu, 29 May 2008 17:38:33 -0500

The EDUCAUSE/Internet2 Security Task Force recently commented on the "Recommendations for Safeguarding Education Records". The Family Educational Rights and Privacy Act (FERPA) has never contained regulations related to the security of student education records, although it is implied as a necessary safeguard to help keep student education records private. The department chose to include in this Notice some recommendations that included references to guidance issued by the National Institute of Standards in Technology (NIST) and the Office of Management and Budget (OMB). While the Security Task Force shared the department's concerns about cybersecurity, it was concerned that focus on government approaches may be misinformed and encouraged the department to consider resources developed by the task force (e.g., see Effective IT Security Practice Guide). The task force further cautioned the department that "the inclusion of recommended safeguards causes considerable confusion about the department's intentions and future plans."

See Rodney Petersen's blog for additional details. To review the full comments of ACE and the Security Task Force, see:

IT and Campaign '08

drupal — Thu, 22 May 2008 10:23:03 -0500

While Washington concentrates on the IT legislative and regulatory issues at hand, the presidential candidates are being queried about their positions and the Democratic and Republican National Committees are focusing on crafting platforms to be adopted during their summer conventions. Policy experts from some of the leading IT policy associations and think tanks will share their insights on how the Democratic and Republican parties and their respective presidential nominees will integrate IT issues into the 2008 presidential campaign.

A Blueprint for Big Broadband: Moving from Why to How

drupal — Wed, 21 May 2008 12:55:17 -0500

The United States has fallen behind its international competitors in broadband deployment, price, and openness in part because it has no national broadband policy. In contrast, most other countries adopted proactive programs to address the broadband needs of their citizens at the beginning of the decade that are now proving successful. Several U.S. states are now developing their own broadband plans because of the void at the national level. This session will propose an action plan for the nation based on the lessons learned from Europe, Asia, and some U.S. states and discuss what it will take to get such a plan through Congress.

P2P Policy Updates: From Campus to Congress, and Now the State House

drupal — Wed, 21 May 2008 12:55:17 -0500

Peer-to-peer file sharing remains a major headache for campus IT administrators, as the RIAA and MPAA aggressively explore the boundaries of litigation and legislation. This session will feature two panels of experts to discuss where we stand. The first panel will review the best current thinking on campus policy and technology options for coping with P2P issues: How to deal with DMCA notices, prelitigation letters, and John Doe lawsuits, and whether blocking and filtering technologies have matured to the point where they can help. The second panel will look at the current status of federal P2P legislation and also describe recent entertainment industry initiatives to enact such legislation at the state level.

Do's and Don'ts of Advocacy: Helping Your Federal Relations Officer Advance the IT Agenda

drupal — Wed, 21 May 2008 12:55:15 -0500

This session will feature some real-world training about how lobbying works and the keys to effective advocacy. In addition, lobbying meetings (both good and bad) will be role-played to give attendees a feel for the sorts of issues that come up and how best to advance the cause. This session seeks to aid IT professionals in understanding how their federal relations officers work and the best ways CIOs can assist in making that advocacy successful.

American Higher Education Is Going Global: Implications for CIOs, National Networks, and Federal Policymakers

drupal — Wed, 21 May 2008 12:55:15 -0500

U.S. universities have come to see their universes in global terms, most visibly in brand-new overseas campuses. But just as important are joint teaching and research projects that dramatically intensify the flow of data to points halfway around the world. Historically, such data flows have required the physical transportation of people or storage media from place to place. Dramatic improvements in networking technology, however, are changing academic leaders' perceptions of the kinds of collaborations that are possible. The most ambitious forms of network cooperation test the capabilities of the global cyberinfrastructure, with bits crossing campus, regional, national, and international networks. Each of the four tiers is a vital link. Each involves a different set of actors, challenging us to develop new policies and governance structures that respond to the concerns of each level, as well as a truly global perspective that is not yet effectively captured. Our national policy community must step into this void, helping demonstrate the range of possibilities and the choices we face, while respecting and reflecting that people in other countries will likely perceive matters differently from us.

A Cybersecurity Agenda for the Next President

drupal — Wed, 21 May 2008 12:55:14 -0500

There has been much improvement in securing cyberspace in the last five years, but much still needs to be done. The Center for Strategic and International Studies (CSIS) has established a Commission on Cyber Security for the 44th Presidency, the administration that will take office in January 2009. The goal of the commission is to identify a strategy and set of recommendations for the next administration to move ahead in securing cyberspace. This session will provide a status report on the commission's work to date. It will also provide an opportunity to offer input regarding progress that has been made in the higher education sector, remaining challenges and opportunities, and the role of the federal government to help improve cybersecurity at colleges and universities.

The State of the Internet According to the Congressional Internet Caucus

drupal — Wed, 21 May 2008 12:55:13 -0500

The Congressional Internet Caucus is a bipartisan group of over 170 members of the House and Senate working to educate their colleagues about the promise and potential of the Internet. EDUCAUSE is a member of the Congressional Internet Caucus Advisory Committee, which includes a diverse group of public interest, nonprofit, and industry groups working to educate Congress and the public about important Internet-related policy issues. This session will highlight the priority IT policy issues before the 110th Congress according to the cochairs of the Internet Caucus and provide an overview of the Advisory Committee’s programs and activities.

The FTC as an Educational Partner in Improving Data Security and Privacy

drupal — Wed, 21 May 2008 12:55:12 -0500

The Federal Trade Commission deals with issues that touch the economic lives of most Americans. The current portfolio includes protecting consumers in the areas of data security and privacy, identity theft, Social Security number misuse, identity management, spam, maintaining the National Do Not Call Registry, and other IT issues of interest to colleges and universities. The FTC's Bureau of Consumer Protection, although a regulator of businesses, is also an educator: it seeks to educate consumers and provide businesses and other organizations with the information they need to comply with the rules of the road and to provide consumers with the necessary tools to engage in commerce intelligently. This session will highlight information policy issues the FTC is addressing and educational resources institutions of higher education can leverage to improve student, faculty, and staff awareness of data security and privacy risks.

Podcast: Do's and Don'ts of Advocacy: Helping Your Federal Relations Officer Advance the IT Agenda

gbayne — Tue, 20 May 2008 16:05:39 -0500

This hour and sixteen minute podcast features a panel discussion recorded at the EDUCAUSE 2008 Policy Conference. The discussion, "Do's and Don'ts of Advocacy: Helping Your Federal Relations Officer Advance the IT Agenda," includes the following participants:

Anna M. Gould, Project Assistant for EDUCAUSE
Timothy Lance, President and Chairman of NYSERNet, Inc.
Bob Samors, Associate VP of Research & Science Policy at NASULGC
Michael A. Waring, Executive Director of Federal Relations for the University of Michigan-Ann Arbor

This session features some real-world training about how lobbying works and the keys to effective advocacy. In addition, lobbying meetings (both good and bad) are role-played to give a feel for the sorts of issues that come up and how best to advance the cause. This session seeks to aid IT professionals in understanding how their federal relations officers work and the best ways CIOs can assist in making that advocacy successful.

Collecting and Preserving Data in the Wake of a Tragedy

drupal — Wed, 14 May 2008 10:48:32 -0500

After the tragic events of April 16, 2007, at Virginia Tech, IT professionals and university legal counsel had to quickly address the need to collect and preserve data in the event of future litigation. Performing tasks while dealing with grief and protecting academic freedom and privacy issues has required a delicate approach.

EDUCAUSE and Security Task Force Comment on Proposed FERPA Rules

Rodney — Mon, 12 May 2008 20:38:32 -0500

EDUCAUSE joined the American Council on Education (ACE) in comments to respond to a Notice of Proposed Rulemaking regarding the Family Educational Rights and Privacy Act (FERPA). The EDUCAUSE contribution addressed the proposed rules treatment of Social Security Numbers (SSN's), Student ID Numbers, and Student User ID's in the context of "directory information." The comments state:

According to the discussion [in the proposed rules], "student ID numbers (SID) can be used to impersonate the owner of the number and obtain information or services by fraud." We understand that this is widespread practice with respect to how the private sector uses the SSN for obtaining a variety of products and services. We do not believe, however, that unique student ID numbers created for internal educational uses typically are used in the same way or are subject to the same abuses. More often than not, such numbers are treated as identifiers only; they normally cannot be used to obtain access to education records by themselves, without a further act of authentication, nor can they normally be used in combination with other commonly available information to establish accounts or impersonate people. Moreover, on many campuses, the general "student ID number" and the "user ID" used to log in to electronic systems are in fact one and the same. As a result, many campuses may believe that they cannot designate these various kinds of identifiers as directory information even when doing so would yield clear benefits and could cause no harm.

The comments support the U.S. Department of Education's position that SSN's should never be considered "directory information". However, the comments provide alternative language for the treatment of SID and User ID's, essentially suggesting that they could be treated as "directory information" if there is an additional act of authentication and that the identifier itself does not provide an individual with access to student education records. The entire comments related to "directory information" are available on pages 1-2 of the ACE letter. There is also a discussion of "outsourcing" on pages 4-5.

The EDUCAUSE/Internet2 Computer and Network Security Task Force also commented on the department's "Recommendations for Safeguarding Education Records". FERPA has never contained regulations related to the security of student education records, although it is implied as a necessary safeguard to help keep student education records private. The department chose to include in this Notice some recommendations that included references to guidance issued by the National Institute of Standards in Technology (NIST) and the Office of Management and Budget (OMB). While the Security Task Force shared the department's concerns about cybersecurity, it was concerned that focus on government approaches may be misinformed and encouraged the department to consider resources developed by the task force (e.g., see Effective IT Security Practice Guide). The task force further cautioned the department that "the inclusion of recommended safeguards causes considerable confusion about the department's intentions and future plans."

Comments of the American Council on Education on the Family Educational Rights and Privacy Act

elilly — Mon, 12 May 2008 11:21:01 -0500

On behalf of several higher education associations, the American Council on Education submitted comments on the Family Educational Rights and Privacy Act

Comments of the EDUCAUSE/Internet2 Computer and Network Security Task Force on the Family Educational Rights and Privacy Act

elilly — Mon, 12 May 2008 11:07:49 -0500

Comments of the EDUCAUSE/Internet2 Computer and Network Security Task Force on the Family Educational Rights and Privacy Act; Proposed Rule, Federal Register, Vol. 73, No. 57, U.S. Department of Education, Office of Planning, Evaluation and Policy Development

Preserving Internet Freedom: Guiding Principles for the Industry

elilly — Mon, 28 Apr 2008 13:35:26 -0500

This is a speech given by Michael K. Powell, when he was Chairman of the Federal Communications Commission, at the Silicon Flatirons Symposium on "The Digital Broadband Migration: Toward a Regulatory Regime for the Internet Age." University of Colorado School of Law, Boulder, Colorado, February 8, 2004.

Letter sent by USACM to Congress

elilly — Wed, 16 Apr 2008 12:10:25 -0500

Letter sent by USACM, to Congress regarding technology-based filtering of Internet traffic by universities; April 14, 2008.

Big Broadband Connectivity in the United States

elilly — Mon, 14 Apr 2008 12:45:14 -0500

The economic and social future of the United States depends on answering the growing demand for very high-speed broadband connectivity, a capability termed “big broadband.” Failure to take on the challenge could lead to a decline in global competitiveness and an inability to educate students.

Navigating the Regulatory Maze: Notre Dame’s PCI Solution

drupal — Tue, 25 Mar 2008 10:29:56 -0500

Payment Card Industry (PCI) compliance can be daunting, particularly in institutions of higher education with a variety of complex commerce activities. In this presentation, you’ll learn how Notre Dame tackled PCI DSS. We chose a network within a network approach to simplify compliance through isolation and minimize integration issues.

Soliciting Higher Education Input to the Commission on Cyber Security for the 44th Presidency

Rodney — Thu, 06 Mar 2008 15:31:21 -0600

The Center for Strategic and International Studies (CSIS) has established a Commission on Cyber Security for the 44th Presidency – the administration that will take office in January 2009. The goal of the nonpartisan Commission is to develop recommendations for a comprehensive strategy to improve cyber security in federal systems and in critical infrastructure.

The EDUCAUSE/Internet2 Security Task Force has been invited to provide input to the Commission and welcomes your comments in the following areas:

What role has the Federal government played to improve cybersecurity these past few years that has been useful for the higher education sector?
Are there ways in which the Federal government has hindered progress? If so, please describe.
Are there new initiatives you would like to see from the Federal government help to improve cybersecurity?

Please comment by Wednesday, March 12th, 2008, by using the "Post new comment" section below or sending your comments to Security-Task-Force@educause.edu

The wild wild waste: e-waste

elilly — Thu, 06 Mar 2008 12:33:15 -0600

E-Waste is a popular, informal name for discarded electronic products such as computers, VCRs, cameras, which have reached the end of their "useful life". Discarded electronic products contain a stew of toxic metals and chemicals such as lead, mercury, cadmium, chromium, and PCBs. Unfortunately, e-Waste, a dangerous byproduct of technology's relentless expansion is one of the fastest growing segments of higher education institutions' waste stream. We need to be strong advocates of "producer responsibility" and give companies an incentive to produce environmentally friendly products. In addition we must learn about and educate our campus communities about managing old electronics and associated materials. In this report, we attempt to answer the question "What should be done with old electronic products?" discuss opportunities for waste prevention and reuse, and talk about regulatory issues.

Facebook 2.0

elilly — Fri, 29 Feb 2008 14:32:43 -0600

"What challenges remain with this killer app? I suggest three: (1) user education, especially for adolescents and their parents; (2) new features connecting higher education's missions to the popular site; and (3) legal and policy considerations on a global scale."

Get Me Out of the Middle!

elilly — Fri, 29 Feb 2008 14:29:13 -0600

"File sharing serves as a tuning fork for an entirely new orchestra of digital communication, interaction, and social expectation. We in higher education must provide a clear, calm, ringing voice in defining
the terms of the new world when we believe our goals and values are important not only to us but to society."

Washington Update: We’re from the Government, and We’re Here to Help You!

drupal — Tue, 26 Feb 2008 11:06:43 -0600

Federal policies have a very real impact on our institutions. Hear how EDUCAUSE is working with our members to influence federal policies in cases where our government is doing too little (broadband networking) and too much (peer-to-peer file sharing). Learn how you can help to form our message and raise the voice of higher education. Mark Luker, the director of the EDUCAUSE policy office in D.C., will give us the inside story.

EDUCAUSE Podcast: Washington Update with EDUCAUSE Vice President Mark Luker

gbayne — Mon, 25 Feb 2008 15:39:31 -0600

In this 50 minute podcast we feature a keynote speech by Mark Luker, Vice President of EDUCAUSE. The speech was delivered at the EDUCAUSE 2008 Southwest Regional Conference in Houston, Texas, and is entitled, "Washington Update: We're from the Government, and We're Here to Help You!"

Mark A. Luker is vice president of EDUCAUSE, where he heads Net@EDU, a 'thought-leadership' coalition of university CIOs and state network directors who work to advance national networking for both research and education through joint projects and federal policy. Net@EDU was the spawning ground of Internet2, and is now expanding its focus to include advanced connections between campuses and their customers in surrounding communities and regions. He also leads the EDUCAUSE office of government relations and policy analysis in Washington, D.C., which works with partner associations to help shape the emerging policy and legal framework of the Internet, intellectual property, and other issues of importance to higher education.

Luker served two years as program director for advanced networking at the National Science Foundation and the federal Next Generation Internet project. Prior to that he was CIO at the University of Wisconsin–Madison campus, where he was active in national projects including the National Learning Infrastructure Initiative and the Coalition for Networked Information.

Luker received his doctorate from the University of California, Berkeley, and served as a faculty member and then a dean at the University of Minnesota, Duluth, before moving into information technology management.

Exploring the Interrelationship Between State Networks and Health Care Network Systems

drupal — Mon, 25 Feb 2008 09:44:14 -0600

This panel will discuss the interrelation between state networks and health care networks. In particular, the discussion will focus on the various community perspectives of the FCC-funded (Universal Service Fund) rural health care initiative and how we can work together as a community to educate the FCC on the role of regional and state networks.

Policy 2008 Conference to Address Policy Issues Facing Higher Education Today--Register Now

cluckett — Tue, 19 Feb 2008 18:03:17 -0600

Privacy. Cybersecurity. Telecommunications Reform. These and other national policy issues that have an impact on higher education will be the focus of the 2008 EDUCAUSE Policy Conference, May 7–8 in Arlington, Virginia, an event that brings together CIOs, IT directors, legal counsel, librarians, federal relations officers, and other college and university leaders for discussion of important new federal laws, legislative and regulatory developments, and emerging trends. Early-bird registration is available through April 11 for this event. Register now to save money.

Keynote Speakers

Jonathan S. Adelstein, Commissioner, Federal Communications Commission
Jeffrey S. Lehman, Senior Scholar, Center for Democracy and Technology, and Chair, Internet2 Board of Trustees
Lydia B. Parnes, Director, Bureau of Consumer Protection, Federal Trade Commission

Today’s the Day for HEA

ckeller — Fri, 08 Feb 2008 12:08:06 -0600

A run down of various issues being debate over legislation to renew the Higher Education Act.

Someone Didn’t Get the Memo

ckeller — Wed, 19 Dec 2007 10:11:00 -0600

As U.S. accreditation advisory panel — with Congress watching — seeks to show kinder, gentler side, some members take aggressive tack on regional agencies.

Wi-Fi 'illegal images' politician defends legislation

ckeller — Fri, 07 Dec 2007 10:58:14 -0600

The Democratic sponsor of a bill forcing anyone with an open Wi-Fi connection to report illegal images--or pay fines of up to $300,000--says a recent Internet outcry over the legislation misses the point.

Rep. Nick Lampson of Texas, who drafted the bill that the House of Representatives approved this week, said through a spokesman on Thursday that he didn't actually mean to target Americans who happen to have Wi-Fi access points at home. The legislation also covers social-networking sites, domain name registrars, Internet service providers, and e-mail service providers such as Hotmail and Gmail.

FBI-.edu security partnership trying to overcome decades of mistrust

ckeller — Tue, 04 Dec 2007 10:41:35 -0600

"Two weeks ago, we described a report from the National Research Council on the challenges of balancing an open academic research environment with the risks that the fruits of the research could be adopted by terrorists. One of the report's recommendations was the formation of a standing committee comprised of academics and members of the national security agencies. It turns out that the FBI had already heeded similar advice—back in 2005."

Warning on Tuition, Shift on Accreditation

ckeller — Thu, 15 Nov 2007 10:39:01 -0600

"If the Higher Education Act bill that House Democrats introduced late last week did not persuade college leaders that the issue of college prices is and will remain front and center on the federal policy agenda, the House education committee’s consideration of the legislation Wednesday should once and for all."

Swiftboating Higher Education on P2P

ckeller — Thu, 15 Nov 2007 09:22:05 -0600

"The latest salvo in the entertainment industry’s campaign against illegal downloading of movies and music — aided and abetted by Congress — is wrong, and students should help fight it, Kenneth C. Green argues."

URGENT CALL TO ACTION: Pending Illegal File Sharing Legislation Harmful to Higher Education

cyang — Sat, 10 Nov 2007 16:05:06 -0600

Leaders of the House Committee on Education and Labor have just introduced legislation to control illegal file sharing in higher education as part of the College Opportunity and Affordability Act of 2007. The higher education community opposes a provision that requires campuses to develop new institutional plans for addressing infringement activities on their networks.

Please call (do not write or email) the offices of the House Committee on Education and Labor. Time is short. Markup is this coming Wednesday, November 14, 2007 at 9:00 AM.

For specific details please see our talking points.

WHAT YOU CAN DO:

1. Coordinate your response to this challenge with your institutional executives and federal relations officers.

2. Call, do not write or email, as many of the Committee Members as possible, and express your strong opposition to this proposal. You can find a list of all the Committee members and their phone numbers.

Remember, if your campus representative is a member of this committee, you have special influence. We request that you make every effort to contact their office! When calling, ask for the staff member in charge of higher education and leave a voice mail if necessary. Call back later and try to speak directly with a staff member.

Access additional information on the relevant legislative language, talking points, and a template response to use.