US Department of Education

Postsecondary Institution Data-Security Overview and Requirements

In light of recent data breaches, all postsecondary institutions need to ensure that they are diligent in protecting student data. Beginning in FY18, higher education institutions’ information security safeguards will be audited to ensure compliance with the Gramm-Leach- Bliley Act (GLBA). A recent memo regarding increased enforcement can be found here. The Maryland Higher Education Commission is committed to supporting all Maryland institutions in ensuring they meet all federal data security requirements.

Tiina Rodrigue, Senior Advisor for Cybersecurity, Federal Student Aid, US Department of Education, recently provided a presentation to all Maryland postsecondary institutions. A recording of that presentation can be viewed here. You can view the PowerPoint presentation here.

The 2015 FFIEC Cybersecurity Assessment Tool can be found here.

If you have any questions regarding data security, please reach out to Tiina Rodrigue directly at tiina.rodrigue@ed.gov.