The next step in the MetroProtect: Security IT initiative will be a revision of the Banner software to conceal all sensitive data.

Beginning June 1, Social Security numbers, credit card information, birth year and age will be concealed from view by Banner users. Exceptions to the data masking will be made for those who have a demonstrated business need and documented approval from their area vice president.

“There are almost 1,000 Banner users on campus,” said Rick Beck, director of application services in Information Technology (IT). “By default, every one of these people will lose the ability to see this (confidential) information. However, if there is a demonstrated business need for access to this data – for example, Financial Aid will need to be able to see Social Security numbers – people can get access to the information they need.”

Beck explained that IT will be contacting Banner users in the next two weeks to distribute electronic forms for departments to request access to the data. After the group approvals for exceptions have been granted, IT will make forms available for individuals to gain confidential data access. All access to the confidential data will require approval of the user’s vice president.

The MetroProtect security initiative began in July 2006 in the wake of the 2006 theft of a college-owned laptop that contained confidential information, including Social Security numbers, of current and former students. The initiative has included review of IT policies and procedures, revisions to password policies, and scanning of laptops for confidential information to ensure that if another theft were to occur there would be no threat to the personal information of students, alumni and employees. (Read more at http://www.mscd.edu/securityalert/recent_news.htm.)

 IT staff underwent training from SunGuardHE, the company that makes Banner, in how to conceal the confidential data.

“Many faculty and staff have been asking for this data protection for quite a while, and we’re happy to be able to provide it,” Becksaid .

Questions about the confidential data concealment should be directed to Mark Schultz, IT administration and financial systems manager and chair of the Protection of Sensitive Data Committee, at 303-556-5060.