Faculty Senate Meeting 9-27-2010
Employees personal information may have been compromised. Employees should contact banks and keep track of personal accounts.
--PERSONAL INFORMATION PROTOCOLS:
Senator Mendez said that at least one faculty member wants to know if there’s an investigation being done by a Federal agency regarding who actually received the sensitive date (via email). In addition, what happens after the six months of fraud protection has expired? Will faculty be responsible for paying? And, years down the road, if an incident occurs, who’s liable?
Per VP Sowell, yes the authorities have been notified and it appears there’s not much we can do as far as determining who the recipient is. Nothing has been determined regarding coverage beyond 6-months.
MCIS would like an update of what’s been done with this situation, specifically a report from Brad Baca’s ad hoc committee. John provided this update: there is a four-person ad hoc committee looking into what happened and how we can avoid this in the future. They’re researching security companies that can visit our campus and comprehensively look at the potential risks inherent in our system. Though costly, the hope is to advance a set of recommendations to Administration and Trustees on our data protocol.
ART faculty are asking for more communication about what happened and why, who is accountable, what is the nature of the person(s) that received this information, some assurance that law enforcement is involved, what is learned from this? An apology would be nice.
John said that some of these questions and requests have been addressed with previous emails. There can be risks associated with making public the details about what type of errors occurred. In part, these are personnel issues between employer and employee. Being too forthright with this information is a delicate matter. However, John will go back and review the emails (whether they address certain questions) and he will communicate the expressed concerns to Brad.
John elaborated; We know what the address is, but we don’t know anything about the owner of the address. Law enforcement has been notified, but nothing is known about any investigation at this time. Sowell ended the discussion with an apology, on behalf of the administration, to the faculty about the lapses that led to this incident and the unnecessary and troubling amount of energy that has been expended here.
In sum, John will share with Brad and the committee the concerns that were expressed in the Senate and, when possible, provide the Senate any new information on the topic.
