Re: Internet Fax Policy (E-Fax Services)

[Ellen Amsel <eamsel () PRINCETON EDU>]

Hi.  We don’t have a policy specifically for FAX, but our information security policy discusses the protection of 
information, both digital and hard copy.  It’s all based on a classifying the information and the requirements for 
protecting each classification level.  So in essence, the type of information contained in the FAX defines how it 
should be handled/protected.

Kind regards, Ellen

Ellen Amsel
Chief Information Security Officer
Princeton University
701 Carnegie Center
Princeton, NJ 08540
(609) 258 3565

Information Security Blog:  https://ciso.princeton.edu<https://ciso.princeton.edu/>
Twitter: @PrincetonCISO


From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Carlos 
Lobato
Sent: Monday, January 05, 2015 12:11 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Internet Fax Policy (E-Fax Services)


Hello Colleagues,



If your University has deployed E-Fax Services and has created a policy to govern its usage, I would highly appreciate 
it if you can send me a link to your policy, standards or procedures.



I would also appreciate any input on perceived security issues and risks to data privacy (FERPA & HIPAA).



Thanks in advance,



Carlos,​



Carlos S. Lobato, CISSP, CISA, CIA

IT Compliance Officer



New Mexico State University

Information and Communication Technologies

MSC 3AT PO Box 30001

Las Cruces, NM  88003



Phone (575) 646-5902

Fax (575) 646-5278