Mary received the internal audit draft report and plans to review a response with Erv tomorrow.
Kim received a list of known Linux users in IT and plans to send an invitation to complete the survey soon.
We need procedures for identifying the person calling that will work for StuTel and the VTOC.
Joyce will draft some procedures based on how the VTOC identifies callers for password resets.
It was agreed that in the interest of "doing the secure thing" we should revoke certificates if requested even if the call turns out to be malicious.
Frank will send Joyce a screen shot of the TAS revocation screen.
None
Waiting on feedback from Jack Noll.
A question for Lee Anne is whether HR is doing any sort of analysis of online leave reports for IT since implementation of use of personal digital certificates? For instance are the leave reports completed quicker? Any standard reporting done? Any notable changes?