Call to Order and Approval of Minutes (5 Minutes)
July 2013 meeting minutes were approved via email.
July 2013 meeting minutes were approved via email.
Jacob Farmer, UITS Manager of Identity Management Systems, provided the council with an overview of a Two-Factor Authentication proposal currently under consideration by UITS senior leadership. Jacob provided background on our current One Time Password (OTP) token, its use, and common multi-factor authentication techniques (something you know, something you have, and something you are). The current OTP solution is fundamentally adequate. However, replacing OTP with a more robust two-factor authentication solution provides many benefits. For example, a more robust solution would allow IU to integrate strong authentication into “high value” transactions (e.g., direct deposit changes, grade entry, beneficiary changes) and would provide users non-OTP token alternatives (e.g., phone calls, text messages, mobile device applications) to use for the second factor. The council will consider this proposal and issue a statement to UITS senior leadership.
A recap of the data exposure was provided to Risk Council members.
Reference
Next meeting: July 23, 2014
March 12, 2014
1:00pm
Poplars 017, Video Bridge 227451
Jim Kennedy
Stew Cobine
Chris Swafford
Tom Davis (ch)
Jacob Farmer (guest)
Leslie Pfeffer
Joe Scodro
Doug Wasitis
Kim Milford
Eric Cosens
Phil Cocran
Eric Swank
Dan Rives
Joan Hagen
Jeff Lambright
Chris Viers