Joe Lape
CISA
Broadcom
Cyber Grant
Fortinet SOC as service
MS-ISAC subscription
IU1 District Accounts
IU1 employees should only use IU1 email
Mark Walz, Sweet, Stevens, Katz, Williams
"Employment Status – These individuals are employees of the Intermediate Unit, not of the district. Their e-mail accounts are issued by the IU as part of their employment, and that is the official channel of communication that should be used for their professional responsibilities."
"Compliance and Recordkeeping – The IU, like school districts, is subject to the same legal requirements regarding e-mail archiving, retention, and compliance with open records laws. Keeping all communications within the IU’s system ensures that the IU can fulfill its legal obligations and maintain proper control of its employees’ records. Using district-specific accounts could create unnecessary confusion and complicate compliance responsibilities."
"Other contractors are different from the IU in that they aren’t typically subject to the same record keeping and compliance requirements as school districts. The IU is – that that’s what makes your situation different. If they get an open records request or need to implement a litigation hold, they should notify the IU and you can immediately do so on behalf of the District."
IU1 employees can have District accounts for access purposes
Can forward emails.
Mark Walz, Sweet, Stevens, Katz, Williams
"No, this doesn't violate FERPA if it is handled by a contractor with an e-mail housed on a different domain. Schools would definitely want to be mindful about the security procedures of their contractors - and I would want to see some level of security in the e-mail messages being sent to contractors. But when we're talking about school district and IUs, I'm comfortable with e-mail security and the ability to exchange student records without violating FERPA."