SUNY CISO SUNY Blue Page
The SUNY CISO office maintains a website on SUNY Blue with more detailed information about specific systemwide programs and non-public guidance. To access the SUNY Blue site, please visit: OIT-CISO
SUNY Information Security Working Group (ISWG):
The SUNY CISO office convenes a monthly Information Security Working Group (ISWG) meeting series and manages an associated ISWG Teams Channel ISWG | General | Microsoft Teams and email list. The list is used for collaboration between campus cybersecurity professionals and also to disseminate information about cybersecurity relevant information for SUNY campuses.
To sign up for the ISWG email list, please visit the SUNY Blue CISO site here: OIT-CISO
SUNY GLBA Audit Guidance
Attached is a best practice document from the SUNY Office of the University Auditor (OUA) created to support campuses in meeting the compliance requirements of the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule.
Under the GLBA, campuses are considered financial institutions due to their involvement in various financial services as part of administering Title IV financial aid programs and therefore must comply with the GLBA Safeguards Rule. Campuses actively acknowledge their compliance with GLBA when signing their Program Participation Agreement with the US Department of Education and the Student Aid Internet Gateway (SAIG) Agreement. As part of the administration of Title IV financial aid programs, campuses are responsible for creating, modifying, and transmitting student non-public personal information (NPI) through various systems. One of the objectives of the GLBA is to ensure student NPI is protected from unauthorized access and use.
To evaluate compliance with GLBA, the New York State Single Audit included a review of campus adherence to specific aspects of the GLBA Safeguards Rule. In preparation for this audit, System Administration Office of the University Auditor conducted a survey of all 29 state-operated campuses to gauge overall compliance with this Rule. Based on the survey results a best practice document was developed to support campuses in strengthening their GLBA Safeguards Rule compliance and enhancing the protection of students' NPI: Audit Guidance - GLBA Safeguards Rule