38
Dr Christine Sexton Director, Corporate Information and Computing Services University of Sheffield

Security of academic data in the cloud

Embed Size (px)

DESCRIPTION

Dr Christine Sexton talks about perceived cloud security issues and

Citation preview

Page 1: Security of academic data in the cloud

Dr Christine Sexton

Director, Corporate Information and Computing Services

University of Sheffield

Page 2: Security of academic data in the cloud

Our Cloud Story

Page 3: Security of academic data in the cloud

Why?

• Poor student email service

• Email servers getting old

• Quick wins (timetable)

• Calendar product not supported

• Improved service

• Mobile strategy

• Concentrate on added value

• Pace of Innovation

• Carbon footprint

Page 4: Security of academic data in the cloud

How

• Students – normal governance

• Decision May 2009

• Implementation August 2009

• Staff – approval of UEB

• Implemented email during 2011

• Calendar August 2011

Page 5: Security of academic data in the cloud

Implementation

• Open & transparent

• Engage user community

• No big deal

• Risks identified

– Charging– Resistance to change– Volatility of development– Impact on skills

Page 6: Security of academic data in the cloud

Email

• Tools provided by Google• All mail migrated

• Student– Migration of existing mail– Friendly email aliases

• Staff– Users can continue to use client– IT Support staff early adoptors.– Support Staff in Departments, personal service– Feedback sessions after dept is complete.

Page 7: Security of academic data in the cloud

Calendar

• Students

– Population of Calendars with timetables

• Staff

– Big Bang approach needed

– Data Migration out-sourced

– Users used to Oracle Calendar

– Major business change involved

Page 8: Security of academic data in the cloud

Issues

• Disruptive technology

• Integration

• Training for different communities of users

• Benefits

• Other “Core Apps” - Docs, Sites, Groups, Labs

• Client configuration

• Google changing things

Page 9: Security of academic data in the cloud

Multiple accounts

Page 10: Security of academic data in the cloud

“That's great news for students, now when can staff have it?”

A member of staff

Page 11: Security of academic data in the cloud

Security

Page 12: Security of academic data in the cloud
Page 13: Security of academic data in the cloud
Page 14: Security of academic data in the cloud
Page 15: Security of academic data in the cloud
Page 16: Security of academic data in the cloud
Page 17: Security of academic data in the cloud
Page 18: Security of academic data in the cloud
Page 19: Security of academic data in the cloud
Page 20: Security of academic data in the cloud
Page 21: Security of academic data in the cloud
Page 22: Security of academic data in the cloud
Page 23: Security of academic data in the cloud
Page 24: Security of academic data in the cloud
Page 25: Security of academic data in the cloud
Page 26: Security of academic data in the cloud
Page 27: Security of academic data in the cloud

“After careful assessment of Google Apps for Education against UK Data Protection Law and the University’s own privacy policies the University is satisfied that personal data is being processed appropriately”

Page 28: Security of academic data in the cloud

Risk

Page 29: Security of academic data in the cloud

The University has a modified contract with Google, based on Google’s standard terms and conditions.

Google have agreed to only process personal data in accordance with the standards set out by the EU directive on data protection.

The University has assessed the risk in relation to the US Patriot Act is satisfied that the increased risk presented by this is very small and is manageable.

Page 30: Security of academic data in the cloud

Safe Harbor

Page 31: Security of academic data in the cloud

Export Control

• Technical information covered by UK export law

• Legal advice The use of Google mail … would not in itself qualify as exporting data.

• Data transmitted by email can pass through national boundaries regardless of destination

• Therefore, although the risk is very low …… careful consideration should always be given as to how controlled technology is transmitted and where it is stored.

Page 32: Security of academic data in the cloud
Page 33: Security of academic data in the cloud
Page 34: Security of academic data in the cloud
Page 35: Security of academic data in the cloud
Page 36: Security of academic data in the cloud

The future

Page 37: Security of academic data in the cloud
Page 38: Security of academic data in the cloud

Thank you

http://cicsdir.blogspot.com/

@cloggingchris

[email protected]