Current methods for collection, use, and storage of Social Security numbers in a variety of campus administrative and academic departmental processes create an ongoing risk to the University.  Historical use of Social Security number as the University’s student ID number, as well as its formal and informal use in a wide variety of business practices has created a large collection of sensitive data spread throughout University department’s electronic storage and files.  The University is at risk of SSN exposure and associated costs until the sensitive information is removed where not required and new business processes of ensuring the privacy and proper handling of SSNs are put in place.

Project Goals
 

 

 

 

 

 

 

 

 
Areas of Focus
 

• SSN Removal:
  • Locate SSNs stored electronically by using an enterprise tool and eradicating electronic SSNs that we no longer need. The goal is to clear out all of the historic SSNs that no longer require us to use SSN.
     
• Business Process Engineering:
  • Collaborate with units that have requirements for SSNs to minimize their use and secure business processes that must continue to use them.
     
• Oversight, Awareness, and Policy:
  • Institute governance and policy framework for SSNs.