Spring Break
UW System releases computer audit, applauds campus security
Courtney Teague-Carter
Issue date: 4/23/08 Section: News
An audit released by the UW System on April 4 applauds UW-Whitewater's efforts to protect personal information stored on its networks, while challenging other universities to do the same.
"With the increasing and changing nature of threats, UW institutions will need to increase attention to securing their computer networks and confidential data, to mitigate threats to UW computer networks and private data," the report said.
In the wake of a series of data breaches in state government, the UW System's auditors believe smaller campuses should do more to guard the large amounts of personal data kept on computer systems in the school's network.
The audit praised UW-Whitewater for establishing an officer and appointing information security officers to make sure security issues are a top priority. The auditors believe other campuses should follow Whitewater's lead, as well as UW-Madison and UW-Milwaukee, who also received praised for its security measures.
According to the audit, 190 data breaches and unauthorized disclosures involving colleges and universities were reported in the U.S. since 2005. Over 4 million students, faculty, staff and alumni records were leaked following the incidents which were caused by accidental releases, hackers and stolen computers.
Many data breaches and unauthorized disclosures involving schools can result in identity theft, financial losses, violations of laws, policies, and standards and a damaged reputation for the university.
The audit suggests campuses not only designate computer security officers, but establish written policies and perform periodic vulnerability assessments.
At UW-Whitewater, the Instructional, Communication and Information Technology department offers students tips they can use to insure their personal information does not get released to the public.
"It's very important schools educate users on how to keep their information private," Xa Xiong, iCIT volunteer, said. "The first thing we always tell students is to not give out their net-id and passwords. And if possible we recommend students keep school e-mail addresses and personal e-mail addresses for shopping and other things separate."
The audit maintains colleges and universities must do all they can to protect personal data because it not only can damage students and leave an lasting impact, but it can hurt universities and colleges' relationship with students and the community.
"With the increasing and changing nature of threats, UW institutions will need to increase attention to securing their computer networks and confidential data, to mitigate threats to UW computer networks and private data," the report said.
In the wake of a series of data breaches in state government, the UW System's auditors believe smaller campuses should do more to guard the large amounts of personal data kept on computer systems in the school's network.
The audit praised UW-Whitewater for establishing an officer and appointing information security officers to make sure security issues are a top priority. The auditors believe other campuses should follow Whitewater's lead, as well as UW-Madison and UW-Milwaukee, who also received praised for its security measures.
According to the audit, 190 data breaches and unauthorized disclosures involving colleges and universities were reported in the U.S. since 2005. Over 4 million students, faculty, staff and alumni records were leaked following the incidents which were caused by accidental releases, hackers and stolen computers.
Many data breaches and unauthorized disclosures involving schools can result in identity theft, financial losses, violations of laws, policies, and standards and a damaged reputation for the university.
The audit suggests campuses not only designate computer security officers, but establish written policies and perform periodic vulnerability assessments.
At UW-Whitewater, the Instructional, Communication and Information Technology department offers students tips they can use to insure their personal information does not get released to the public.
"It's very important schools educate users on how to keep their information private," Xa Xiong, iCIT volunteer, said. "The first thing we always tell students is to not give out their net-id and passwords. And if possible we recommend students keep school e-mail addresses and personal e-mail addresses for shopping and other things separate."
The audit maintains colleges and universities must do all they can to protect personal data because it not only can damage students and leave an lasting impact, but it can hurt universities and colleges' relationship with students and the community.
Be the first to comment on this story