Present: Chris, Doreen, Carol, Mike, Mary, Terry

In advance of meeting, Chris distributed the latest version of the Data Classification Policy for review.  The policy describes various types of data classification (e.g. sensitive) and how they should be handled, but does not discuss policy enforcement.  The Data Classification Taskforce may suggest names of people to serve as “data stewards” within functional areas, but it will be up to the FA to appoint the data steward.

Some suggestions from the ADs were to:

• provide training for data stewards, possibly in conjunction with the Training & Education and Security Teams
• provide training for new employees
• edit the policy to reflect current thinking about how we write policies, e.g., lay out the “why this is important” up front and recast the preamble in plainer language.
• create a timeline listing activities and who will be responsible for these activities

Next Steps:

• Data Classification Taskforce should begin conversations within their areas
• Have this discussion added to the LEADS agenda (possibly February 18th)
• Mike would like to present this to President’s Staff, possibly at their March 2013 meeting

Chris also announced that the PCI Policy (Policy for Accepting Credit Card and eCommerce Payments) has been approved by Patrick Norton and has been posted to the Controller’s website.  An early January email from Patrick to all staff explaining this policy will be sent out.

A brief discussion was held regarding the eNewsletter and how we communicate to the college community.  Should this discussion be to move this to the Communications Taskforce?  Since their current charge is to evaluate internal communications, this could be something to consider in a subsequent phase, either with this group or a new one focusing on external communications.

We made good progress on finalizing Education and Training Team membership.  We still need to have a few conversations with staff before announcing, but stay tuned.

Mike asked the ADs to think about how we can improve our project prioritization practices. An AD meeting in January will be dedicated to this topic.  Specifically:

• how do LIS priorities fit with College priorities
• how do ad hoc projects get integrated into existing planned commitments?
• how do we keep focused on high-level (e.g. data classification, information literacy, SLAs, etc.) issues and make reviewing projects habitual?

Thanks for reading,

Terry & Doreen