Educause Security Discussion
mailing list archives
Re: a question about having College ID number as part of directory information
From: Chris Green <cmgreen () UAB EDU>
Date: Thu, 7 Nov 2013 18:10:44 +0000
It generally depends on what that number is needed for. If it's faculty convenience you can probably provide a
separate way to view without further concern.
Student ID numbers generally have an odd way into creeping into other systems/processes without enough thought where
exposure is a major concern (card access/stored value sytems/parking/password resets).
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Roy
Sent: Thursday, November 07, 2013 7:58 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] a question about having College ID number as part of directory information
This may have been addressed before but I am being asked if providing a college ID number on our LDAP and other
directory services is a security risk.
I'm feeling that it isn't but I'm press to put a statement behind it that will put people at ease.
Director Technology Infrastructure
Library and Information Systems
26 E. Main Street
Norton, MA 02766
Galang_Roy () WheatonCollege edu<mailto:Galang_Roy () WheatonCollege edu>