Date: Tue 11/14/2006 3:30 PM

Subject: Message from CUNY CIO - Private Information Advisory, Breach Reporting Procedure

In order to have full awareness throughout our College for the need to protect the personal and private information of our constituents please read two attached documents sent by University CIO’s office. These documents are also posted at CUNY CIOs web site under Information Security-Security Advisories and Security Policies (security.cuny.edu). The Private Information Advisory document underscores the importance of protecting the personal private information of our students, faculty and staff and outlines security practices that should be followed when handling this type of information. The Breach Reporting Procedure outlines the procedure that must be followed when personal private information is inappropriately disclosed.

As always, should you have any questions please do not hesitate to contact me.

On a related topic, please read the following article in USA Today:

Colleges are textbook cases of cyber-security breaches
http://www.usatoday.com/tech/news/computersecurity/hacking/2006-08-01-college-hack_x.htm