This article describes the analysis of data security needs for the Indiana Assessment System of Educational Proficiencies (IASEP), a computer-based rating and documentation system that is currently being implemented statewide for students with disabilities. Analysis of the system and the creation of security architecture to protect sensitive student data are outlined. Matching security controls with security risks and selecting appropriate security software, hardware, and user guidelines are also discussed. The importance of user error in managing student data is recognized, and a teacher training protocol is described.
Get full access to this article
View all access options for this article.
References
1.
Family Education Rights and Privacy Act, 34 C.F.R. Part 99, 1974.
2.
CERIAS & Anderson Consulting, PFIRES: Policy Framework for Interpreting Risk in Ecommerce Security, SANS2000, Purdue University, Center for Education and Research in Information Assurance and Security, West Lafayette, Indiana, 1999.
3.
SzubaT., Safeguarding Your Technology: Practical Guidelines for Electronic Education Information Security, National Center for Educational Statistics, Washington, D.C., http://nces.ed.gov., 1998.
4.
CunninghamJ. N., Indiana Assessment System of Educational Proficiencies: Documentation and Rating Software, Purdue University, Purdue Research Foundation, West Lafayette, Indiana, 1998–2000.
5.
BennettD. E.DavisM. A., The Development of a Computer-Based Alternate Assessment System, unpublished manuscript, Purdue University, West Lafayette, Indiana, 2000.
6.
ArvidsonH. H.CunninghamJ. N.DavisM. A.BennettD. E., Indiana Assessment System of Educational Proficiencies: Program Manual, Purdue University, Purdue Research Foundation, West Lafayette, Indiana, 1999.
7.
Public Law 105-17, Individuals with Disabilities Education Reauthorization Amendments of 1997, U.S. Congress, Washington, D.C., 1997.
8.
MillerS., Using the Techniques of a Security Assessment to Guide Technology Development in Education: CERIAS Technical Report 99-12, Purdue University, Center for Education and Research in Information Assurance and Security, West Lafayette, Indiana, 1999.
CheungO.ClementsB.PechmanE., Protecting the Privacy of Student Records, National Center for Educational Statistics, Washington, D.C., http://nces.ed.gov, 1997.
11.
BennettD. E.DavisM. A.ArvidsonH.CunninghamJ. N., Safeguarding Your Students' Data: IASEP Training Video #4, Golden Dome Productions, South Bend, Indiana, 1999.
