Profile

CommunityPlatform_1350x900.jpg

Jeff Gassaway

Edit My Profile


My Content

1 to 8 of 8 total
Posted By Jeff Gassaway 02-26-2024 12:17:15 PM
Found In Egroup: Cybersecurity
\ view thread
Hi Rusty, We had a very old password standard that we updated with an account security standard: http://ispo.unm.edu/areas/information-security/standards/account-security-standard.html The new standard includes distinguishing between standard user accounts, elevated privileged accounts, ...
Posted By Jeff Gassaway 10-03-2023 10:34:00 AM
Found In Egroup: Privacy
\ view thread
Oui also, for me - see you all there! Jeff
Posted By Jeff Gassaway 02-09-2023 11:43:00 AM
Found In Egroup: NIST 800-171 Compliance
\ view thread
Below are my answers so we can proof out what we would ask in a poll. No state secretes here! Information Security, Privacy, IT, Sponsored Projects, Compliance, Industrial Security Office Even if it's not technical work, it needs to be completed, documented, etc., so yes .5 FTE is the minimum to ...
Posted By Jeff Gassaway 02-09-2023 11:12:00 AM
Found In Egroup: NIST 800-171 Compliance
\ view thread
I don't have the bandwidth to volunteer for more; however, I reached out to other colleagues here to see if there is availability to contribute to this. Jeff
Posted By Jeff Gassaway 12-08-2022 09:54:00 AM
Found In Egroup: Privacy
\ view thread
Colleagues, At last, the moment you've all been waiting for: The Data Privacy Assessment Tool - DPAT-Nov2022-Draft And, the feedback form for the tool - https://forms.gle/oAMEMm3DVZZHqAM5A While the folks in the community who helped develop this can answer questions, it is best if you include ...
Posted By Jeff Gassaway 05-23-2022 03:44:00 PM
Found In Egroup: Cybersecurity
\ view thread
Hi Randy, There were a couple of options based on our organizational complexity, so we aligned it with the person who produces the board report. Jeff
Posted By Jeff Gassaway 10-13-2021 10:01:00 AM
Found In Egroup: Cybersecurity
\ view thread
Hi Petrus, Some vendors only release that detail under an NDA; however, some vendors do post those on REN-ISAC's site directly, and others provide a mechanism through REN-ISAC to request those – here's the link: https://www.ren-isac.net/public-resources/hecvat.html Jeff
Posted By Jeff Gassaway 09-28-2021 02:13:00 PM
Found In Egroup: Cybersecurity
\ view thread
In fairness, let's let Educause see if there are fixes for these issues we're bringing up. Jeff