University of Missouri Enhances Security of Social Security Numbers

COLUMBIA — April 14, 2009 — The University of Missouri is enhancing its security policies by storing Social Security Numbers (SSNs) that are mandatory for business purposes in a centralized database and purging those that are unnecessary.

The ultimate goal of the initiative is that SSN will only be collected by authorized areas. Printed materials will be imaged and shredded. When SSNs cannot be removed, they will be physically secured with restricted access.

The University of Missouri Division of Information Technology (IT) will work with those offices still needing to collect Social Security Numbers to store them in the centralized database. This database generates an Alternate Identification (AltID) number for application use. AltID looks and acts like a SSN, but without the risk of identity theft. AltID is translated back into a SSN to fulfill mandatory reporting requirements.

During this university-wide initiative, faculty and staff are reviewing business practices concerning the collection, use, and storage of SSNs to determine if every instance has a mandatory function. The University of Missouri Division of IT staff succeeded in securing SSNs and purging those that are unnecessary from several key data repositories, including Alumni at all four campuses; Single Sign-On (SSO); Remedy Help Desk; the Vendor Registration application used by Procurement; the Minority Business Development Office; and Design and Construction. SSN use in the PeopleSoft systems is currently under review.

According to Dr. Gary Allen, Vice President for Information Technology, “protecting the personal information of our employees, students, business associates, and friends is a top-most priority for the university. This project will take everyone’s cooperation.”

Contact your Campus Information Security Officer to register your applications that use SSNs and to discuss strategies to secure your data.

For more information on the SSN Project please visit http://www.umsystem.edu/ums/departments/is/.

University of Missouri Enhances Security of Social Security Numbers

COLUMBIA — March 16, 2009 — It may be only March, but the university is already in the midst of a system-wide spring cleaning—of Social Security numbers. The project, which takes place on all four campuses, University of Missouri Health Care, Extension and UM system, will replace all Social Security numbers necessary to UM business with alternate identification numbers and delete all those unnecessary.

“The university takes seriously its responsibility to safeguard the personal information and identity of our faculty, staff, students, alumni, retirees, friends and donors” said UM President Gary Forsee.

Forsee went on to say, “This project will go a long way toward protecting the security and personal identity of our associates.”

A Division of Information Technology team has been created to initiate the process of securing Social Security numbers in a centralized database and replacing them with alternate identification numbers. Social Security numbers that are no longer necessary will be deleted to prevent exposure to outside sources. This is a huge project and will require the cooperation of everyone across the entire system.

What can you do?Begin by searching your electronic and paper files for Social Security numbers and deleting or shredding those that are no longer necessary.
Additional information can be found at https://doit.sharepoint.missouri.edu/sysops/public/SSNProject.

UM system will keep you informed of this project as it progress.